Logitech G15 Keyboard
hello misc@ I have a Logitech G15 Keyboard, I am Extremely happy with it however, the period key on the number pad does not work like it should, it puts a ~ where a . should be this is kind of troublesome because when i key ip address it is habit to use the Number pad. I was hoping someone could point me to the reverent source file to hack on, if there is no simple fix. on a side note if someone wanted to write support for this keyboard in OpenBSD I would donate a Keyboard. here is a partial dmesg from a post hackathon -current uhub2 at uhub1 port 1 uhub2: Logitech Logitech G15 Keyboard, rev 1.10/1.03, addr 2 uhub2: 4 ports with 2 removable, bus powered uhidev0 at uhub2 port 1 configuration 1 interface 0 uhidev0: Logitech Logitech Gaming Keyboard, rev 2.00/1.70, addr 3, iclass 3/1 ukbd0 at uhidev0: 8 modifier keys, 6 key codes wskbd1 at ukbd0 mux 1 wskbd1: connecting to wsdisplay0 uhidev1 at uhub2 port 1 configuration 1 interface 1 uhidev1: Logitech Logitech Gaming Keyboard, rev 2.00/1.70, addr 3, iclass 3/0 uhidev1: 3 report ids uhid0 at uhidev1 reportid 1: input=1, output=0, feature=0 uhid1 at uhidev1 reportid 2: input=7, output=0, feature=0 uhid2 at uhidev1 reportid 3: input=1, output=20, feature=1 uhidev2 at uhub2 port 4 configuration 1 interface 0 uhidev2: G15 Keyboard G15 Keyboard, rev 2.00/1.03, addr 4, iclass 3/0 uhidev2: 3 report ids uhid3 at uhidev2 reportid 1: input=8, output=0, feature=0 uhid4 at uhidev2 reportid 2: input=8, output=18, feature=3 uhid5 at uhidev2 reportid 3: input=0, output=991, feature=0 Thank you very much Sam Fourman Jr.
Re: open(hd0a:/etc/boot.conf): Invalid argument
Thanks everyone who responded. Your helpful suggestions are appreciated. Being new to BSD I was struggling a bit with some of the command line differences to linux, but when I took a look at fdisk, it showed me that the MBR partition ('slice') id was A5 and not A6. Wierd. I simply changed it to A6 et voila! It's now working fine. Once again, thanks for the suggestions. This thread is now closed. On 6/7/07, Shag Bag [EMAIL PROTECTED] wrote: I've installed OpenBSD4.1 from the 3 CD set which I purchased shortly after it was released and have been running it on and off ever since. However, this morning I tried to boot it and it came up with the above error (full error listing below). I re-installed the whole OS yesterday (everything except bsd.mp and game41.tgz) and it was working fine. The only thing I did after re-install was add a few packages and ports and compile the LookXP source packages from http://lxp.sourceforge.net. I have not knowingly touched the boot.conf file at all so I'm at a loss as to how the above error is showing. I have read the biosboot(8) man page but it didn't help. I am new to OpenBSD having come from a brief linux background and would appreciate any help. I could always simply re-install OpenBSD4.1 again but this would be a last resort as: i) I'd like to know what the cause of the problem is and how to fix it - in case it happens again; ii) I wouldn't learn anything if I simply reinstalled everytime; and iii) I've spent a lot of time configuring icewm to get it like I want and am loathed to go through this process again. The full error list I'm getting is: Loading... probing: pc0 apm mem[632K 2046M a20=on] disk: fd0 hd0+* OpenBSD/i386 BOOT 2.13 open(hd0a:/etc/boot.conf): Invalid argument boot booting hd0a:/bsd: open hd0a:/bsd: Invalid argument failed(22). will try /obsd boot booting hda0:/obsd: open hda0a:/obsd: Invalid argument failed(22). will try /bsd.old boot booting hda0:/bsd.old: open hda0a:/bsd.old: Invalid argument failed(22). will try /bsd boot booting hda0:/bsd: open hda0a:/bsd: Invalid argument failed(22). will try /obsd boot booting hda0:/obsd: open hda0a:/obsd: Invalid argument failed(22). will try /bsd.old boot booting hda0:/bsd.old: open hda0a:/bsd.old: Invalid argument failed(22). will try /bsd Turning timeout off. boot _
carp advskew strange behaviour
Hello, I have two machines running OpenBSD-current (OpenBSD 4.1-current (GENERIC) #238: Mon Jun 4 20:03:24 MDT 2007) and I also got this on the same machines running 4.1-stable. There are 5 carp interfaces and I will only describe one but the behaviour is the same. The machine puff1 has: inet 172.22.16.2 255.255.240.0 NONE vhid 4 pass mysecret advbase 1 The machine puff2 has: inet 172.22.16.2 255.255.240.0 NONE vhid 4 pass mysecret advbase 1 advskew 200 Both have net.inet.carp.preempt=1 While running this setup I can see puff1 being the master and puff2 being the slave. Now if I reboot puff1, puff2 becomes master but does not give back the master state on puff1 when it comes back up and puff2 stays master. Now if I change the advskew to 100 instead of 200 on puff2, I have the normal behaviour and puff1 becomes master if present. Can someone enlighten me on this?
ACPI slowness on amd64 bsd.mp
The latest amd64 snapshots have ACPI enabled. On my Shuttle SN25P, with an AMD dual core processor, this leads to a significant decrease in performance. For example, given the same bsd.mp kernel on an unloaded system, here's a time'd compile of an application with ACPI disabled: gmake 50.99s user 7.26s system 92% cpu 1:03.29 total and with ACPI enabled: gmake 53.05s user 10.81s system 73% cpu 1:26.57 total As you can see, enabling ACPI leads to a more-or-less 50% slowdown. I did file an informal report about this same issue in January, so I don't think this is a new problem. With ACPI enabled, even when the machine is idle top shows that one processor is fairly continuously spending 60-70% of its time processing interrupts. In use, the machine feels really sluggish, as if using a machine from several years back. Disabling ACPI at UKC is all that is needed to restore performance. Here's the dmesg with ACPI disabled: OpenBSD 4.1-current (GENERIC.MP) #1286: Thu Jun 7 00:52:32 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 1073278976 (1023MB) avail mem = 1025142784 (977MB) User Kernel Config UKC disable acpi 263 acpi0 disabled UKC quit Continuing... mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.2 @ 0xf (32 entries) bios0: Shuttle Inc SN25V10 acpi at mainbus0 not configured mainbus0: Intel MP Specification (Version 1.1) cpu0 at mainbus0: apid 0 (boot processor) cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4200+, 2210.47 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: apic clock running at 200MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 4200+, 2210.19 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative mpbios: bus 0 is type PCI mpbios: bus 1 is type PCI mpbios: bus 2 is type PCI mpbios: bus 3 is type PCI mpbios: bus 4 is type PCI mpbios: bus 5 is type PCI mpbios: bus 6 is type ISA ioapic0 at mainbus0 apid 2 pa 0xfec0, version 11, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 2 pci0 at mainbus0 bus 0: configuration mode 1 NVIDIA nForce4 DDR rev 0xa3 at pci0 dev 0 function 0 not configured pcib0 at pci0 dev 1 function 0 NVIDIA nForce4 ISA rev 0xa3 nviic0 at pci0 dev 1 function 1 NVIDIA nForce4 SMBus rev 0xa2 iic0 at nviic0 iic1 at nviic0 adt0 at iic1 addr 0x2e: adm1027 rev 0x6a iic1: addr 0x4e 03=08 04=08 12=fd 13=0f 28=83 29=12 2a=12 2b=28 ohci0 at pci0 dev 2 function 0 NVIDIA nForce4 USB rev 0xa2: apic 2 int 11 (irq 11), version 1.0, legacy support pciide0 at pci0 dev 6 function 0 NVIDIA nForce4 IDE rev 0xf2: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility atapiscsi0 at pciide0 channel 0 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: SONY, CD-RW CRX320EE, RYK3 SCSI0 5/cdrom removable cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 pciide0: channel 1 ignored (disabled) pciide1 at pci0 dev 7 function 0 NVIDIA nForce4 SATA rev 0xf3: DMA pciide1: using apic 2 int 10 (irq 10) for native-PCI interrupt wd0 at pciide1 channel 0 drive 0: WDC WD1500ADFD-00NLR0 wd0: 16-sector PIO, LBA48, 143089MB, 293046768 sectors wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 5 pciide2 at pci0 dev 8 function 0 NVIDIA nForce4 SATA rev 0xf3: DMA pciide2: using apic 2 int 11 (irq 11) for native-PCI interrupt ppb0 at pci0 dev 9 function 0 NVIDIA nForce4 PCI-PCI rev 0xa2 pci1 at ppb0 bus 5 IC Ensemble Envy24PT/HT Audio rev 0x01 at pci1 dev 6 function 0 not configured VIA VT6306 FireWire rev 0x80 at pci1 dev 7 function 0 not configured nfe0 at pci0 dev 10 function 0 NVIDIA CK804 LAN rev 0xa3: apic 2 int 5 (irq 5), address 00:30:1b:b9:05:6c eephy0 at nfe0 phy 1: Marvell 88E Gigabit PHY, rev. 2 ppb1 at pci0 dev 11 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci2 at ppb1 bus 4 ppb2 at pci0 dev 12 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci3 at ppb2 bus 3 ppb3 at pci0 dev 13 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci4 at ppb3 bus 2 ppb4 at pci0 dev 14 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci5 at ppb4 bus 1 vga1 at pci5 dev 0 function 0 NVIDIA GeForce 6600 rev 0xa2 wsdisplay0 at
How much time to 'master' OpenBSD
Hi there OpenBSD users, I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. With 'master' I mean you have all skills to configure and use the system. You know reguar expressions, thorough cli skills like pipes/vi/mg/scripts etc. Probably most would say that you also need to know programming languages and networking knowledge to master an OS but in this case I want to ignore them. Pieter Verberne
Re: How much time to 'master' OpenBSD
On Fri, 8 Jun 2007 12:58:37 +0200, Pieter Verberne [EMAIL PROTECTED] wrote: Hi there OpenBSD users, I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. With 'master' I mean you have all skills to configure and use the system. You know reguar expressions, thorough cli skills like pipes/vi/mg/scripts etc. Probably most would say that you also need to know programming languages and networking knowledge to master an OS but in this case I want to ignore them. This is an impossible question to answer. Everyone's capabilities to absorb and apply new information are different. Not to mention that OpenBSD is a moving target (albeit a slower one than most) and quite dissimilar from similar OSes that share the common UNIX goals but vary greatly in implementation (e.g. BSD v SysV init). -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net
Looking for readers of RFC's
Hi, I'm looking for up to 4000+ readers to read one RFC out loud and record it. Please contact me to be handed a number to read. I'm looking to give these to OpenBSD as a community effort. Please read my blog at http://centroid.eu for more information. -peter
Re: How much time to 'master' OpenBSD
On Fri, Jun 08, 2007 at 12:58:37PM +0200, Pieter Verberne wrote: I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS 30 seconds. What's taking you so long? :) - Seriously, this is an unanswerable question, since the definition of master is individually derived. I've been using Unix for decades, and believe I have mastered some features of Unix and Unix-like systems. And some application environments. But there's *plenty* I know nothing about. Just ask any developer who's dealt with me, and they'll agree. :) I At one time, there was a BSD certification program in development. I'm not sure where things stand, but they do have a website: http://www.bsdcertification.org/
carp and alias
Hi everybody, I read the carp(4) manpage, the carp FAQ entry and http:// www.countersiege.com/doc/pfsync-carp/ yet I still have some questions. Let's say I have an OpenBSD host like this: #/etc/hostname.xl0 inet 10.0.0.1 255.255.255.0 NONE inet alias 10.0.0.2 255.255.255.0 inet alias 10.0.0.3 255.255.255.0 inet alias 10.0.0.4 255.255.255.0 This might be the external interface. Now I want to have one carp interface with the address 10.0.0.250: #/etc/hostname.carp0 inet 10.0.0.250 255.255.255.0 10.0.0.255 vhid 1 pass foo Is it possible to let carp0 have the alias definitions like this? #/etc/hostname.carp0 inet 10.0.0.250 255.255.255.0 10.0.0.255 vhid 1 pass foo inet alias 10.0.0.2 255.255.255.0 inet alias 10.0.0.3 255.255.255.0 inet alias 10.0.0.4 255.255.255.0 and remove those from /etc/hostname.xl0? regards, Tobias W. * God is real, unless declared integer.
PF : Syntax error using macro
Hello, I have a little problem with my pf.conf, when I use macro containing two or more interfaces, if I use these macros with the :network keyword on nat rules pf tell me I've made syntax error. Ex : --- Ethernet=xl0 Wifi=ral0 Lan={ $Ethernet $Wifi } Ext=rl0 nat on $Ext from $Lan:network to any - $Ext This will return me an error. And this will not : --- Ethernet=xl0 Wifi=ral0 Lan={ $Ethernet $Wifi } Ext=rl0 nat on $Ext from $Lan to any - $Ext I want to have the same as making 2 nat rules with each his own interface ($Ethernet and $Wifi), isn't possible ? Thanks, Yggdrasill
Re: How much time to 'master' OpenBSD
4-5 years, but I'm still learning lots and lots every day. It really depends a lot on the definition of mastering, since using an OS also requires understanding the real world situation where you use the OS in. I felt at home on *nix after 2-3 years, which I think is something easier to define.
Re: How much time to 'master' OpenBSD
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pieter Verberne Sent: Friday, June 08, 2007 6:59 AM To: misc@openbsd.org Subject: How much time to 'master' OpenBSD Hi there OpenBSD users, I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. With 'master' I mean you have all skills to configure and use the system. You know reguar expressions, thorough cli skills like pipes/vi/mg/scripts etc. Probably most would say that you also need to know programming languages and networking knowledge to master an OS but in this case I want to ignore them. Pieter Verberne I don't think that i will EVER master OpenBSD, but then again, as a personal rule, I never claim to be an expert at anything. My boss would probably say differant, he thinks I'm pretty smart (lucky me... groan...). What he doesn't know is every time I get stuck I come crying to the OpenBSD Misc list for help. You guys are awsome!
Re: carp and alias
Tobias Weisserth wrote: Is it possible to let carp0 have the alias definitions like this? #/etc/hostname.carp0 inet 10.0.0.250 255.255.255.0 10.0.0.255 vhid 1 pass foo inet alias 10.0.0.2 255.255.255.0 inet alias 10.0.0.3 255.255.255.0 inet alias 10.0.0.4 255.255.255.0 and remove those from /etc/hostname.xl0? Yes. Make sure the carp interfaces match on each firewall, otherwise you'll end up multiple masters. $ ifconfig carp0 carp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:5e:00:01:01 description: ISP VIP carp: MASTER carpdev fxp0 vhid 1 advbase 2 advskew 0 groups: carp inet 10.10.10.63 netmask 0xff80 broadcast 10.10.10.127 inet6 fe80::200:5eff:fe00:101%carp0 prefixlen 64 scopeid 0xb inet 10.10.10.2 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.3 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.4 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.5 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.6 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.7 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.8 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.9 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.10 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.14 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.16 netmask 0xff80 broadcast 10.10.10.127 inet 10.10.10.17 netmask 0xff80 broadcast 10.10.10.127 inet 10.20.20.62 netmask 0xffe0 broadcast 10.20.20.63 inet 10.20.20.45 netmask 0xffe0 broadcast 10.20.20.63
Re: How much time to 'master' OpenBSD
On Friday 08 June 2007 14:59:16 you wrote: It's very much in full swing. Beta exams were given at BSDCan and LinuxTAG. There is some OpenBSD representation on the BSDCG (Certification Group), including wim@ and [EMAIL PROTECTED] lol... do you speak about yourself in the third person? ;-) -- Antoine
Re: Sometime NAT, sometimes NOT?
On Fri, 8 Jun 2007, Geraerts Andy wrote: We have an OpenBSD firewall running for a while now. Since a few days we encounter some sort of selective natting. I try to ping a host, I get reply, and 2 minutes later I try to ping the same host and I dont get replies. So despite the state being created in both instances, you see a packet egress your external interface with the source address of the internal host instead of the external interface of the NAT box? ~BAS
starting pppoe
I cant recall if I need to do this or not... fxp1 is my NIC used to connect to my DSL modem. I have this setup: % cat /etc/hostname.tun0 !/usr/sbin/ppp -ddial isp PF=YES is set in rc.conf Do I still need to have this file? % cat /etc/hostname.fxp1 up -JD -- J.D. Bronson Telecommunications Site Support Aurora West Allis Memorial Hospital Office: 414.978.8282 Fax: 414.977.5299
Sometime NAT, sometimes NOT?
We have an OpenBSD firewall running for a while now. Since a few days we encounter some sort of selective natting. I try to ping a host, I get reply, and 2 minutes later I try to ping the same host and I dont get replies. Running tcpdump learned us that the packet isnt always being natted. This can also be seen in the output of following commands : ping 172.29.28.20 Pinging 172.29.28.20 with 32 bytes of data: Request timed out. On the openbsd I see no natting : [EMAIL PROTECTED]:~ pfctl -vvss | grep -A3 172.29.28.20 | more self icmp 172.31.255.24:768 - 172.29.28.20:768 0:0 age 00:00:19, expires in 00:00:07, 4:0 pkts, 240:0 bytes, rule 208 id: 46632391003339fb creatorid: 6e3eb503 A few minutes later : ping 172.29.28.20 Pinging 172.29.28.20 with 32 bytes of data: Reply from 172.29.28.20: bytes=32 time=2ms TTL=62 [EMAIL PROTECTED]:~ pfctl -vvss | grep -A3 172.29.28.20 | more self icmp 172.31.255.24:768 - 10.9.0.10:768 - 172.29.28.20:768 0:0 age 00:00:03, expires in 00:00:10, 4:4 pkts, 240:240 bytes, rule 208 id: 4663239100333d60 creatorid: 6e3eb503 Now the openbsd does the correct nat!? The machine has been running for 2 years and after a power failure we see this problem. pfctl -si Status: Enabled for 4 days 15:46:59 Debug: Misc Hostid: 0x6e3eb503 Interface Stats for em1 IPv4 IPv6 Bytes In 00 Bytes Out 0 352 Packets In Passed 00 Blocked 00 Packets Out Passed 02 Blocked 03 State Table Total Rate current entries 3599 searches 951532091 2364.5/s inserts 33601058.3/s removals 33565068.3/s Counters bad-offset 00.0/s fragment 780.0/s short 00.0/s normalize 330.0/s memory 00.0/s bad-timestamp 00.0/s congestion 804430.2/s ip-option 460.0/s proto-cksum00.0/s state-mismatch 247910.1/s state-insert 2310.0/s state-limit00.0/s src-limit 00.0/s synproxy 00.0/s Is this a known bug in 3.7? Since its a company firewall it isnt easy to do an upgrade ofcourse :-) Thanks, Andy Geraerts No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.8.11/838 - Release Date: 7/06/2007 14:21 __ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager at : [EMAIL PROTECTED] or call +32-(0)11-240234. This footnote also confirms that this email message has been swept by Sophos for the presence of computer viruses. __
Re: How much time to 'master' OpenBSD
On Fri, 8 Jun 2007 08:36:35 -0400, Josh Grosse [EMAIL PROTECTED] wrote: At one time, there was a BSD certification program in development. I'm not sure where things stand, but they do have a website: http://www.bsdcertification.org/ It's very much in full swing. Beta exams were given at BSDCan and LinuxTAG. There is some OpenBSD representation on the BSDCG (Certification Group), including wim@ and [EMAIL PROTECTED] -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net
Re: PF : Syntax error using macro
On 2007/06/08 14:31, Yggdrasill Senecoen wrote: I want to have the same as making 2 nat rules with each his own interface ($Ethernet and $Wifi), isn't possible ? You can do this using interface groups, you can set these up with the ifconfig(8) 'group' option (via hostname.if, usually).
About BSD Certification
Hi What do you think of The BSD Certification Group at bsdcertification.org? Is this a good idea? From my perspective it looks like a smart marketing way. A way to make money from people who think this would help in some way. Taking a certification doesn't prove anything imho. And the way that they focus on the 4 different BSD's.. you could have someone being an expert in OpenBSD yet he has never used DragonflyBSD, would this make him less interesting to hire for a BSD specific job? Best regards Rico
Re: How much time to 'master' OpenBSD
On Fri, 8 Jun 2007 15:08:50 +0200, Antoine Jacoutot [EMAIL PROTECTED] wrote: lol... do you speak about yourself in the third person? jdixon@ has been known to, yes. -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net
Re: How much time to 'master' OpenBSD
On Friday 08 June 2007 15:49:22 Jason Dixon wrote: jdixon@ has been known to, yes. Excellent! He should be called Julius then, not Jason. ;) -- Antoine
Re: PF : Syntax error using macro
On 2007/06/08 14:10, Stuart Henderson wrote: On 2007/06/08 14:31, Yggdrasill Senecoen wrote: I want to have the same as making 2 nat rules with each his own interface ($Ethernet and $Wifi), isn't possible ? You can do this using interface groups, you can set these up with the ifconfig(8) 'group' option (via hostname.if, usually). ugh, I can see why noone's done the docs for this yet. I think it should go something like this, but BNF is easier to read than write, and I may have missed something in my testing of where group names are allowed... Index: share/man/man5/pf.conf.5 === RCS file: /cvs/src/share/man/man5/pf.conf.5,v retrieving revision 1.379 diff -u -p -r1.379 pf.conf.5 --- share/man/man5/pf.conf.58 May 2007 23:38:12 - 1.379 +++ share/man/man5/pf.conf.58 Jun 2007 14:05:05 - @@ -1419,7 +1419,8 @@ This rule applies only to packets with t addresses and ports. .Pp Addresses can be specified in CIDR notation (matching netblocks), as -symbolic host names or interface names, or as any of the following keywords: +symbolic host names, interface names or interface group names, or as any +of the following keywords: .Pp .Bl -tag -width xx -compact .It Ar any @@ -1441,7 +1442,7 @@ the route back to the packet's source ad Any address that matches the given table. .El .Pp -Interface names can have modifiers appended: +Interface names and interface group names can have modifiers appended: .Pp .Bl -tag -width -compact .It Ar :network @@ -2761,7 +2762,7 @@ option = set ( [ timeout ( t [ state-policy ( if-bound | floating ) ] [ require-order ( yes | no ) ] [ fingerprints filename ] | - [ skip on ( interface-name | { interface-list } ) ] | + [ skip on ifspec ] | [ debug ( none | urgent | misc | loud ) ] ) pf-rule= action [ ( in | out ) ] @@ -2803,8 +2804,7 @@ rdr-rule = [ no ] rdr [ pass [ portspec ] [ pooltype ] ] antispoof-rule = antispoof [ log ] [ quick ] - for ( interface-name | { interface-list } ) - [ af ] [ label string ] + for ifspec [ af ] [ label string ] table-rule = table \*(Lt string \*(Gt [ tableopts-list ] tableopts-list = tableopts-list tableopts | tableopts @@ -2812,8 +2812,8 @@ tableopts = persist | const | { [ tableaddr-list ] } tableaddr-list = tableaddr-list [ , ] tableaddr-spec | tableaddr-spec tableaddr-spec = [ ! ] tableaddr [ / mask-bits ] -tableaddr = hostname | ipv4-dotted-quad | ipv6-coloned-hex | - interface-name | self +tableaddr = hostname | ifspec | self | + ipv4-dotted-quad | ipv6-coloned-hex altq-rule = altq on interface-name queueopts-list queue subqueue @@ -2844,8 +2844,10 @@ return = drop | return | re icmpcode = ( icmp-code-name | icmp-code-number ) icmp6code = ( icmp6-code-name | icmp6-code-number ) -ifspec = ( [ ! ] interface-name ) | { interface-list } -interface-list = [ ! ] interface-name [ [ , ] interface-list ] +ifspec = ( [ ! ] ( interface-name | interface-group ) ) | + { interface-list } +interface-list = [ ! ] ( interface-name | interface-group ) + [ [ , ] interface-list ] route = ( route-to | reply-to | dup-to ) ( routehost | { routehost-list } ) [ pooltype ] @@ -2865,8 +2867,9 @@ ipspec = any | host | { host host = [ ! ] ( address [ / mask-bits ] | \*(Lt string \*(Gt ) redirhost = address [ / mask-bits ] routehost = ( interface-name [ address [ / mask-bits ] ] ) -address= ( interface-name | ( interface-name ) | hostname | - ipv4-dotted-quad | ipv6-coloned-hex ) +address= ( interface-name | interface-group | + ( ( interface-name | interface-group ) ) | + hostname | ipv4-dotted-quad | ipv6-coloned-hex ) host-list = host [ [ , ] host-list ] redirhost-list = redirhost [ [ , ] redirhost-list ] routehost-list = routehost [ [ , ] routehost-list ]
Re: How much time to 'master' OpenBSD
On Fri, 8 Jun 2007 15:53:12 +0200, Antoine Jacoutot [EMAIL PROTECTED] wrote: On Friday 08 June 2007 15:49:22 Jason Dixon wrote: jdixon@ has been known to, yes. Excellent! He should be called Julius then, not Jason. Et tu, Antoine? -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net
Re: About BSD Certification
Rico Secada wrote: Hi What do you think of The BSD Certification Group at bsdcertification.org? i think it gives me a massive erection. the quality of an admin is measurable directly as a function of the extraneous certifications they have, duh! Is this a good idea? From my perspective it looks like a smart marketing way. A way to make money from people who think this would help in some way. if it were for non-BSD licensed OSes, i would totally agree, however i think it's a legitimate move to give us BSD folks some sort of laurels that appeal to stupid HR and mgmt types and not a move to hustle up cash. Taking a certification doesn't prove anything imho. And the way that they focus on the 4 different BSD's.. you could have someone being an expert in OpenBSD yet he has never used DragonflyBSD, would this make him less interesting to hire for a BSD specific job? knowing one BSD implies a comparable level of skill in the other ones, IMO. only a matter of figuring out the package utility and occasionally using features unique to that BSD. there is also that deep throbbing philosophical pain that overwhelms me when i use the other BSDs... cheers, jake Best regards Rico
Re: How much time to 'master' OpenBSD
Pieter Verberne [EMAIL PROTECTED] wrote: I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. Back when I started out with Unix, in the early 1990s, people told me it would take ten years to master sysadmin skills. You can quibble about that figure, but systems sure haven't become simpler in the meantime. (At this point the cocksure PC power users who want to run some flavor of Unix because it's kewl and who ask me that question usually start to deflate a bit.) -- Christian naddy Weisgerber [EMAIL PROTECTED]
PPPoE MTU Problem
Hi, I've been experiencing some strange problems. I have a PPPoE/PPPoA bridging ethernet modem in the UK and am using userland ppp to connect to my DSL provider. I have been setting MTU/MRU to 1458 in ppp.conf and have been getting a *lot* of these messages: ppp[18688]: tun0: Error: ip_Input: deflink: wrote 1429, got Message too long By looking at the ppp logs I can see that my ISP is requesting an MTU of 1420 and, indeed, that is what the tun0 device is set to. However, if, once connected, I manually set the MTU for tun0 to 1458 all these messages disappear and I experience no packet loss. I have tried setting my MTU in ppp.conf to match the requested 1420 but weirdly this still causes packet loss. I am assuming that though ppp is setting the tun0 interface's MTU to 1420 somehow the outgoing packets are taking their MRU value from ppp.conf and not the interface's value. Or maybe this has something to do with the PPPoE stuff going on. For now I have my ppp.linkup doing ifconfig tun0 mtu 1458 which seems like an odd fix. Will [EMAIL PROTECTED]:~ cat /etc/ppp/ppp.conf default: set log Phase Chat LCP IPCP CCP tun command set redial 15 0 set reconnect 15 1 pppoe: set device !/usr/sbin/pppoe -i sis0 disable acfcomp protocomp deny acfcomp set mtu max 1458 set mru max 1458 set speed sync #enable lqr #set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname [EMAIL PROTECTED] set authkey password add! default HISADDR enable dns
hoststated/spamd
I'm feeling lazy today, has anyone already worked out how to use greylisting with a hoststated pool that would like to share config?
Re: /usr/obj partition AWOL
On Thu, Jun 07, 2007 at 09:06:32AM +0200, Otto Moerbeek wrote: On Wed, 6 Jun 2007, Otto Moerbeek wrote: On Wed, 6 Jun 2007, Markus Lude wrote: On Tue, Jun 05, 2007 at 07:51:48AM +0200, Otto Moerbeek wrote: There were some validations checkc added to partitions. If a bad partition is found, it will be marked unused. The checks were a little to strict for some cases. A fix for that went in yesterday, so try a new snap. Thanks for your info. After rebuilding kernel and userland the problem still exists, but now the affected partitions are /var, /home and /data. Hmm. Unmounting /data and doing a manual fsck -f runs without problems. If the problem persists, please report with full disklabel output. $ cat /etc/fstab /dev/wd0a / ffs rw 1 1 /dev/wd0d /tmp ffs rw,nodev,nosuid 1 2 /dev/wd0e /usr ffs rw,nodev 1 2 /dev/wd0f /var ffs rw,nodev,nosuid 1 2 /dev/wd0g /home ffs rw,nodev,nosuid 1 2 /dev/wd0h /data ffs rw,nodev,nosuid 1 2 /dev/wd1d /backup ffs rw,nodev,nosuid 1 2 with an actual kernel: $ sudo disklabel wd0 # /dev/rwd0c: type: ESDI disk: ESDI/IDE disk label: ST3120213A flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 16 sectors/cylinder: 1008 cylinders: 16383 total sectors: 16514064 ^^^ 1008 * 16383 = 16514064 rpm: 3600 interleave: 1 trackskew: 0 cylinderskew: 0 headswitch: 0 # microseconds track-to-track seek: 0 # microseconds drivedata: 0 16 partitions: # sizeoffset fstype [fsize bsize cpg] a: 1024128 0 4.2BSD 2048 16384 16 # Cyl 0 - 1015 b: 3072384 1024128swap # Cyl 1016 - 4063 c: 234441648 0 unused 0 0 # Cyl 0 -232580 ^ Your disk size and c partition size do not match. Can you send a dmesg, to see what the actual size of your disk is? This is really needed to see what is going on. Did you at any time edit the disk size by hand? No, at least I can't remember it. d: 2048256 4096512 4.2BSD 2048 16384 16 # Cyl 4064 - 6095 e: 20479536 6144768 4.2BSD 2048 16384 16 # Cyl 6096 - 26412 disklabel: partition c: partition extends past end of unit disklabel: partition e: partition extends past end of unit older kernel: $ sudo disklabel wd0 [...] 16 partitions: # sizeoffset fstype [fsize bsize cpg] a: 1024128 0 4.2BSD 0 0 16 # Cyl 0 - 1015 b: 3072384 1024128swap # Cyl 1016 - 4063 c: 234441648 0 unused 0 0 # Cyl 0 -232580 d: 2048256 4096512 4.2BSD 0 0 16 # Cyl 4064 - 6095 e: 20479536 6144768 4.2BSD 0 0 16 # Cyl 6096 - 26412 f: 4095504 26624304 4.2BSD 0 0 16 # Cyl 26413 - 30475 g: 20479536 30719808 4.2BSD 0 0 16 # Cyl 30476 - 50792 h: 183242304 51199344 4.2BSD 0 0 16 # Cyl 50793 -232580 disklabel: partition c: partition extends past end of unit disklabel: partition e: partition extends past end of unit disklabel: partition f: offset past end of unit disklabel: partition f: partition extends past end of unit disklabel: partition g: offset past end of unit disklabel: partition g: partition extends past end of unit disklabel: partition h: offset past end of unit disklabel: partition h: partition extends past end of unit Any hints how to fix this beside repartition and reinstall? If possible, please leave the disk as is, until we've done further diagnosis. If that is not possible, you can use the 'e' command in disklabel, to set the actual size of the disk to the size (in sectors) reported in the dmesg. You might need to adjust the 'c' partition as well. After having sen your dmesg, I see that your disk size is really 234441648 sectors. The disklabel says 16514064 though. The new consistency checks did not like that. The consistency checks have been disabled in two steps (rev 1.44. and rev 1.66 of sys/kern/subr_disk.c). So a current kernel should not trip on this anymore. There remain two questions: how did the size end up being wrong in the disklabel, and how to repair. To the first question I can only guess; it could be you dd'ed an image from another disk, you edited the size by hand or we are seeing the results of a (old?) bug in disklabel handling that now surfaced because of the concistency checks. The second question I already answered: using the 'e' command in disklabel lets you set the size of the disk in the label. After that,
Re: How much time to 'master' OpenBSD
Pieter Verberne wrote: I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. Twelve years.
Re: need a machine for an itanium port
anybody showed interest in suporting your Itanium request?
Re: need a machine for an itanium port
anybody showed interest in suporting your Itanium request? From what I know, I think dlg has not received any real offers yet.
Re: About BSD Certification
On 6/8/07, Rico Secada [EMAIL PROTECTED] wrote: Hi What do you think of The BSD Certification Group at bsdcertification.org? Is this a good idea? From my perspective it looks like a smart marketing way. A way to make money from people who think this would help in some way. Read up about the goals of the organization, and the intentions they have going in. Then take a look at the names affiliated with the organization, and the people that are putting effort into furthering a BSD certification track and the reasons why. Many of the names you should recognize as contributors in our community. Then have a look at the fully disclosed proceedings and progress of what the group's accomplished so far. Once you come to your conclusions, I hope you'll be more hesitant to drop this kind of insulting and uninformed drivel. DS
Re: Laptop won't boot with latest i386 snapshot
Yes, it did solve the problem =) Thanks Artur. Seems that the new acpi code doesn't like my laptop. On 08 Jun 2007 09:21:19 +0200, Artur Grabowski [EMAIL PROTECTED] wrote: I don't think those are the problem though. Try disabling acpi instead. //art -- An OpenBSD user... and that's all you need to know =) Please, send private emails to [EMAIL PROTECTED]
Re: Laptop won't boot with latest i386 snapshot
Pardon me but, isn't acpi and apm already enabled by default on yesterday's snapshot? acpi0 at mainbus0: rev 0 acpi0: tables DSDT FACP APIC SSDT acpitimer at acpi0 not configured acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (AGPB) acpiprt2 at acpi0: bus 2 (P2P_) acpiec at acpi0 not configured ... Also, typing enable acpi or enable apm returns an already enabled message. On 6/8/07, Kenneth R Westerback [EMAIL PROTECTED] wrote: You could try enabling the acpi* stuff. Sometimes the interrupt allocation on newer boxes requires acpi. Ken -- An OpenBSD user... and that's all you need to know =) Please, send private emails to [EMAIL PROTECTED]
Re: need a machine for an itanium port
On Fri, 8 Jun 2007, Theo de Raadt wrote: anybody showed interest in suporting your Itanium request? From what I know, I think dlg has not received any real offers yet. Sad, well I'll throw US$100 into the mix if someone wants to co-ordinate it. I don't have any use for Itanium, but I do know that dlg@ has done some great work, so I might as well support him in something he wants to do. Anyone else? dian
Re: About BSD Certification
On 6/8/07, Rico Secada [EMAIL PROTECTED] wrote: Taking a certification doesn't prove anything imho. And the way that they focus on the 4 different BSD's.. you could have someone being an expert in OpenBSD yet he has never used DragonflyBSD, would this make him less interesting to hire for a BSD specific job? if it is dflybsd specific job than yes, otherwise no. -- almir
Re: How much time to 'master' OpenBSD
Pieter Verberne wrote: Hi there OpenBSD users, I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. With 'master' I mean you have all skills to configure and use the system. You know reguar expressions, thorough cli skills like pipes/vi/mg/scripts etc. Probably most would say that you also need to know programming languages and networking knowledge to master an OS but in this case I want to ignore them. Pieter Verberne All depend on how seriously you read the FAQ and the man page really. Even after years of using it, I still learn new things regularly and I make it a must do, to read the FAQ all over again time to time. So, to answer your question, it's more like how seriously are you ready man page and FAQ and absorb what's there as all you need to know is there. That's assuming you have basic understanding of Unix and network stuff, etc. So, your answer is really you that can provide it based on your willingness to read the great documentations available to you. After you answer that question, you will have your answer. Best, Daniel
Re: need a machine for an itanium port
On Fri, Jun 08, 2007 at 12:42:15PM -0600, Diana Eichert wrote: | On Fri, 8 Jun 2007, Theo de Raadt wrote: | | anybody showed interest in suporting your Itanium request? | | From what I know, I think dlg has not received any real offers | yet. | | Sad, well I'll throw US$100 into the mix if someone wants to co-ordinate | it. I don't have any use for Itanium, but I do know that dlg@ has done | some great work, so I might as well support him in something he wants to | do. | | Anyone else? I'll match your $100, Diana. Paul 'WEiRD' de Weerd -- [++-]+++.+++[---].+++[+ +++-].++[-]+.--.[-] http://www.weirdnet.nl/ [demime 1.01d removed an attachment of type application/pgp-signature]
Re: need a machine for an itanium port
From what I know, I think dlg has not received any real offers yet. Sad, well I'll throw US$100 into the mix if someone wants to co-ordinate it. I don't have any use for Itanium, but I do know that dlg@ has done some great work, so I might as well support him in something he wants to do. From my perspective, I have some hopes that doing work on ia64 will lead us to developing security techniques that may affect other architectures. But perhaps noone cares about that anymore...
Re: need a machine for an itanium port
ok - I can match Diana with 100 euros so. Cheers. On 08/06/07, Theo de Raadt [EMAIL PROTECTED] wrote: From what I know, I think dlg has not received any real offers yet. Sad, well I'll throw US$100 into the mix if someone wants to co-ordinate it. I don't have any use for Itanium, but I do know that dlg@ has done some great work, so I might as well support him in something he wants to do. From my perspective, I have some hopes that doing work on ia64 will lead us to developing security techniques that may affect other architectures. But perhaps noone cares about that anymore...
Re: need a machine for an itanium port
I just sent a $100 donation via the orders page, for itanium...or whatever. Paul de Weerd wrote: On Fri, Jun 08, 2007 at 12:42:15PM -0600, Diana Eichert wrote: | On Fri, 8 Jun 2007, Theo de Raadt wrote: | | anybody showed interest in suporting your Itanium request? | | From what I know, I think dlg has not received any real offers | yet. | | Sad, well I'll throw US$100 into the mix if someone wants to co-ordinate | it. I don't have any use for Itanium, but I do know that dlg@ has done | some great work, so I might as well support him in something he wants to | do. | | Anyone else? I'll match your $100, Diana. Paul 'WEiRD' de Weerd -- [++-]+++.+++[---].+++[+ +++-].++[-]+.--.[-] http://www.weirdnet.nl/ [demime 1.01d removed an attachment of type application/pgp-signature]
Re: How much time to 'master' OpenBSD
On Jun 8, 2007, at 5:58 AM, Pieter Verberne wrote: Hi there OpenBSD users, I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. About 10 years through deliberate practice, just like any other complex area of study. See The Role of Deliberate Practice in the Acquisition of Expert Performance by Ericsson, et al. http://projects.ict.usc.edu/itw/gel/EricssonDeliberatePracticePR93.pdf Choice quote: Our review has also shown that the maximal level of performance for individuals in a given domain is not attained automatically as function of extended experience, but the level of performance can be increased even by highly experienced individuals as a result ofdeliberate efforts to improve. Hence, stable levels of performance after extended experience are not rigidly limited by unmodifiable, possibly innate, factors, but can be further increased by deliberate efforts. We have shown that expert performance is acquired slowly over a very long time as a result of practice and that the highest levels of performance and achievement appear to require at least around 10 years of intense prior preparation. The areas of study particular to mastering systems administration haven't changed much over the decades, just the particulars. I think the table of contents and bibliography of _Essential System Administration_ by Frisch is a good introduction to the topics. http://www.oreilly.com/catalog/esa3/toc.html Others mentioned BSDCertification.org which also has a pretty comprehensive list areas of study. http://www.bsdcertification.org/downloads/ pr_20051005_certreq_bsda_en_en.pdf -- Freedom, truth, love, beauty. John Rodenbiker [EMAIL PROTECTED]
Re: need a machine for an itanium port
On Fri, 8 Jun 2007, Theo de Raadt wrote: On Fri, 8 Jun 2007, Diana Eichert wrote: Sad, well I'll throw US$100 into the mix if someone wants to co-ordinate it. I don't have any use for Itanium, but I do know that dlg@ has done some great work, so I might as well support him in something he wants to do. From my perspective, I have some hopes that doing work on ia64 will lead us to developing security techniques that may affect other architectures. But perhaps noone cares about that anymore... Dunno what the target amount is but if we can get 20 people contributing US/E 100 then there should be enough for an Itanium. So where are the other 18 or so folks? diana
Re: need a machine for an itanium port
On Jun 8, 2007, at 1:22 PM, Diana Eichert wrote: Dunno what the target amount is but if we can get 20 people contributing US/E 100 then there should be enough for an Itanium. So where are the other 18 or so folks? One more just donated $100. Bryan
PF binat question
If I want to mask one server, will this be enough: PRIV = 192.168.1.100 PUB = 24.5.0.6 binat on tl0 from $PRIV to any - $PUB ? -- You should be the change that you want to see in the world. - Gandhi
Re: need a machine for an itanium port
yep, just donated here too: Your order currently is: - EUR 100.00 [DON] DONATION to the OpenBSD Project - Total: EUR 100.00 + Shipping. ... ... ... Comments: in response to Theos call to support Itanium port by dlg@ on the [EMAIL PROTECTED] list. On 08/06/07, Bryan Vyhmeister [EMAIL PROTECTED] wrote: On Jun 8, 2007, at 1:22 PM, Diana Eichert wrote: Dunno what the target amount is but if we can get 20 people contributing US/E 100 then there should be enough for an Itanium. So where are the other 18 or so folks? One more just donated $100. Bryan
Re: hoststated/spamd
On 2007/06/08 16:51, Stuart Henderson wrote: I'm feeling lazy today, has anyone already worked out how to use greylisting with a hoststated pool that would like to share config? no takers? ok, well if anyone else needs it... (with 'service smtp' in hoststated.conf, otherwise change the anchor name accordingly): rdr-anchor hoststated/smtp from spamd-white rdr proto tcp from !spamd-exempt to $MX port smtp - 127.0.0.1 port spamd rdr-anchor hoststated/* I might just have come up with this sooner if it weren't for http://www.winkleighcider.com/?p=prodpound ...
Re: How much time to 'master' OpenBSD
On 6/8/07, Pieter Verberne [EMAIL PROTECTED] wrote: I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. With 'master' I mean you have all skills to configure and use the system. You know reguar expressions, thorough cli skills like pipes/vi/mg/scripts etc. Probably most would say that you also need to know programming languages and networking knowledge to master an OS but in this case I want to ignore them. [using 'you' below in the abstract sense.] i'm going to be different and say 3 months, but probably much less than that. i switched to using openbsd with no previous unix experience. i installed it myself (into a triple boot windows/linux setup. linux was installed the day before. i actually used linux maybe 2 times.). i was pretty much using it without issues within a month. i was a student at the time, so of course i had infinite time and no deadlines, but still, not that bad. if you've never installed any OS before, the installer may be confusing. pushing enter a lot helps. i had previously screwed around with dos extended partitions, ramdisks, norton disk encryption, whatever, so disklabel was nothing new. you can learn enough vi (or mg) to do basic tasks like editing config files within a day. you can learn enough about starting apache, named, or whatever to use the shipped default configs in about a day for each service. a basic pf setup that just does nat takes maybe a day. so even assuming notepad is the only text editor you've ever used, i'd expect you could setup a personal web server that also nats your home network in a weekend. learning stuff like regex or scripting can take however long you want to spend on it, but you learn these things as you go. i used openbsd for several years before ever going beyond the most basic shell tasks, or perl at all. it was maybe 2 years before i needed to learn regex back expressions. yes, to master openbsd takes a long time, but you don't need to be a master to use it successfully. you only need to master the parts you use.
Re: hoststated/spamd
rdr-anchor hoststated/smtp from spamd-white rdr proto tcp from !spamd-exempt to $MX port smtp - 127.0.0.1 port spamd The fact that those two table names are different looks suspiciously wrong to me. -Bob
Re: How much time to 'master' OpenBSD
On 6/8/07, Ted Unangst [EMAIL PROTECTED] wrote: On 6/8/07, Pieter Verberne [EMAIL PROTECTED] wrote: I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. With 'master' I mean you have all skills to configure and use the system. You know reguar expressions, thorough cli skills like pipes/vi/mg/scripts etc. Probably most would say that you also need to know programming languages and networking knowledge to master an OS but in this case I want to ignore them. [using 'you' below in the abstract sense.] i'm going to be different and say 3 months, but probably much less than that. i switched to using openbsd with no previous unix experience. i installed it myself (into a triple boot windows/linux setup. linux was installed the day before. i actually used linux maybe 2 times.). i was pretty much using it without issues within a month. i was a student at the time, so of course i had infinite time and no deadlines, but still, not that bad. if you've never installed any OS before, the installer may be confusing. pushing enter a lot helps. i had previously screwed around with dos extended partitions, ramdisks, norton disk encryption, whatever, so disklabel was nothing new. you can learn enough vi (or mg) to do basic tasks like editing config files within a day. you can learn enough about starting apache, named, or whatever to use the shipped default configs in about a day for each service. a basic pf setup that just does nat takes maybe a day. so even assuming notepad is the only text editor you've ever used, i'd expect you could setup a personal web server that also nats your home network in a weekend. learning stuff like regex or scripting can take however long you want to spend on it, but you learn these things as you go. i used openbsd for several years before ever going beyond the most basic shell tasks, or perl at all. it was maybe 2 years before i needed to learn regex back expressions. yes, to master openbsd takes a long time, but you don't need to be a master to use it successfully. you only need to master the parts you use. It's awesome hearing Ted's experience. I'd paraphrase the saying of a popular board game, it's easy to get started with, and one can continue mastering OpenBSD as long as they want to. To get a SOHO OpenBSD server set up it doesn't take long to get that level mastered. Greg
Re: need a machine for an itanium port
On Friday, June 8, 2007 at 13:47:26 -0700, Bryan Vyhmeister wrote: On Jun 8, 2007, at 1:22 PM, Diana Eichert wrote: Dunno what the target amount is but if we can get 20 people contributing US/E 100 then there should be enough for an Itanium. So where are the other 18 or so folks? One more just donated $100. And here's another one. Maurice
Re: About BSD Certification
* Rico Secada wrote: What do you think of The BSD Certification Group at bsdcertification.org? It is as useless as MSCE and all the other vendor certificates. I would even go so far to claim it's a lot worse than a Microsoft or Cisco certificate. This is not backed by any industry, it just reflects what some people in the BSD community think would be needed to do a day job. bsdcertification.org is there to boost the ego of it's members only. There is no real value in it.
Re: PPPoE MTU Problem
On 2007/06/08 23:44, Jason McIntyre wrote: On Fri, Jun 08, 2007 at 04:36:28PM +0100, Will Jenkins wrote: I've been experiencing some strange problems. I have a PPPoE/PPPoA bridging ethernet modem in the UK and am using userland ppp to connect to my DSL provider. I have been setting MTU/MRU to 1458 in ppp.conf and have been getting a *lot* of these messages: ppp[18688]: tun0: Error: ip_Input: deflink: wrote 1429, got Message too long no answers for you, but here are some stuff i would mess with: - kernel pppoe(4) (much nicer ;) seconded, it works nicely on BT-based lines in .uk for me (some of the LLU providers only do PPPoA though). I found it a lot easier to get working than using ppp(8), and I'm not exactly new to ppp(8)...
Re: PPPoE MTU Problem
On Fri, Jun 08, 2007 at 04:36:28PM +0100, Will Jenkins wrote: I've been experiencing some strange problems. I have a PPPoE/PPPoA bridging ethernet modem in the UK and am using userland ppp to connect to my DSL provider. I have been setting MTU/MRU to 1458 in ppp.conf and have been getting a *lot* of these messages: ppp[18688]: tun0: Error: ip_Input: deflink: wrote 1429, got Message too long no answers for you, but here are some stuff i would mess with: - kernel pppoe(4) (much nicer ;) - disable mssfixup in ppp.conf (if it's already on) - pf's max-mss option - use ifconfig to mess w/ sis mtu (i think sis can be adjusted) jmc
Re: About BSD Certification
On 6/8/07, Marc Balmer [EMAIL PROTECTED] wrote: * Rico Secada wrote: What do you think of The BSD Certification Group at bsdcertification.org? It is as useless as MSCE and all the other vendor certificates. I would even go so far to claim it's a lot worse than a Microsoft or Cisco certificate. This is not backed by any industry, it just reflects what some people in the BSD community think would be needed to do a day job. bsdcertification.org is there to boost the ego of it's members only. There is no real value in it. I don't take such a cynical view but overall I think certifications are worthless, even the most well meaning and comprehensive certs. For some, like me, they serve as motivation to learn as much as possible about a given subject. But many others will try to game the system in one way or another so you can never tell if a person holding a certification knows the subject matter or not. Greg http://www.ticketmastersucks.org/tracker.html
Re: About BSD Certification
On Sat, 9 Jun 2007 00:28:08 +0200 Marc Balmer [EMAIL PROTECTED] wrote: * Rico Secada wrote: What do you think of The BSD Certification Group at bsdcertification.org? It is as useless as MSCE and all the other vendor certificates. I would even go so far to claim it's a lot worse than a Microsoft or Cisco certificate. This is not backed by any industry, it just reflects what some people in the BSD community think would be needed to do a day job. My point exactly. Darren Spruell wrote: Then take a look at the names affiliated with the organization, and the people that are putting effort into furthering a BSD certification track and the reasons why. Many of the names you should recognize as contributors in our community. Contributors in our community yes, but this doesn't mean that a BSD certification is worth the money they charge. What it serves in my opinion, especially if the industri was backing it, is a way to keep very skillful people from getting a job! Not the opposite. A lot of people can't afford some 10 different certificates just to prove something which a certificate in reality doesn't prove anyway. bsdcertification.org is there to boost the ego of it's members only. There is no real value in it. Perhaps I am mistaken about the them making money part, but I agree with this. No value! Best regards Rico
Re: PPPoE MTU Problem
On 9 Jun 2007, at 00:11, Stuart Henderson wrote: On 2007/06/08 23:44, Jason McIntyre wrote: On Fri, Jun 08, 2007 at 04:36:28PM +0100, Will Jenkins wrote: I've been experiencing some strange problems. I have a PPPoE/PPPoA bridging ethernet modem in the UK and am using userland ppp to connect to my DSL provider. I have been setting MTU/MRU to 1458 in ppp.conf and have been getting a *lot* of these messages: ppp[18688]: tun0: Error: ip_Input: deflink: wrote 1429, got Message too long no answers for you, but here are some stuff i would mess with: - kernel pppoe(4) (much nicer ;) seconded, it works nicely on BT-based lines in .uk for me (some of the LLU providers only do PPPoA though). I found it a lot easier to get working than using ppp(8), and I'm not exactly new to ppp(8)... I actually started with kernel pppoe and it worked great for two hours and then died inexplicably. The connection then refused to come up after repeated reboots which I found very strange. I went back to my Netgear for a few days and then tried OBSD again. This time the connection held for 5 days and died. Again repeated reboots wouldn't coax the connection back to life but my Netgear router worked fine. I thought I'd try userland ppp because my intuition leads me to believe it may be able to handle odd connection drops etc more robustly. Also I can't work out how to get any kind of logs from kernel pppoe. Will
Invalid partition table (was /usr/obj partition AWOL)
On Thu, Jun 07, 2007 at 04:58:18PM -0500, Emilio Perea wrote: On Thu, Jun 07, 2007 at 07:50:24PM +0200, Otto Moerbeek wrote: I have thinking a bit more about the problem, and it is very likely the following scenario happened: 1. Kernel upgrade by source. 2. Reboot 3. Kernel reads old disklabel format and converts it in-memory to the new v1 format. 4. Run a newfs using the old executable that does not know about the new disklabel format. newfs writes the block and fragment size info the old way, on a spot that is used in v1 labels to store the high 16 bits of the offset and size of a partition. The label is written with version = 1, since the in-memory copy is v1. 5. Reboot, the kernel now sees a v1 disklabel with very high offset and/or size, the new consistency code (which is now disabled) kicks in and marks the partition as unused. So the lesson here is: keep userland and kernel in sync, or use a snapshot to upgrade. I believe that's exactly what happened the first time. The catch is that kernel and userland were being built from the same cvs update, and I thought I was keeping them in sync. In this case it would probably have been better to skip the reboot between building the kernel and the userland. It might have been better to start a whole new thread, but it seemed logical to believe that the problems might be related. Using recent snapshots, last night's insecurity output showed another disklabel change: == sd1 diffs (-OLD +NEW) == --- /var/backups/disklabel.sd1.current Fri Apr 20 01:31:19 2007 +++ /var/backups/disklabel.sd1 Fri Jun 8 01:31:55 2007 @@ -1,4 +1,4 @@ -# Inside MBR partition 0: type A6 start 63 size 71681967 +disklabel: warning, DOS partition table with no valid OpenBSD partition # /dev/rsd1c: type: SCSI disk: da0s1 *--* The full output of disklabel and dmesg follow, but as I was getting ready to send it, I remembered that this same disk had problems with the disklabel changes last October. For some reason it was shown as having a FreeBSD disklabel. Most of correspondence regarding it was off-list, but involved several developers and ended with Ken Westerback suggesting some tests before setting it to OpenBSD. This was fdisk then: Disk: sd1 geometry: 4462/255/63 [71682030 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ] *0: A60 1 1 - 4461 254 63 [ 63:71681967 ] OpenBSD 1: 000 0 0 -0 0 0 [ 0: 0 ] unused 2: 000 0 0 -0 0 0 [ 0: 0 ] unused 3: 000 0 0 -0 0 0 [ 0: 0 ] unused This is now: Disk: sd1 geometry: 4462/255/63 [71687370 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ] 0: 000 0 0 -0 0 0 [ 0: 0 ] unused 1: 000 0 0 -0 0 0 [ 0: 0 ] unused 2: 000 0 0 -0 0 0 [ 0: 0 ] unused *3: A50 0 1 -3 28 41 [ 0: 5 ] FreeBSD *--* It is currently working fine. Should I just change the partition ID to A6, or is there something else I should try first? *--* disklabel: warning, DOS partition table with no valid OpenBSD partition # /dev/rsd1c: type: SCSI disk: da0s1 label: flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 255 sectors/cylinder: 16065 cylinders: 4462 total sectors: 71687370 rpm: 3600 interleave: 1 trackskew: 0 cylinderskew: 0 headswitch: 0 # microseconds track-to-track seek: 0 # microseconds drivedata: 0 15 partitions: # sizeoffset fstype [fsize bsize cpg] c: 7168196763 unused 0 0 # Cyl 0*- 4461 d: 210445263 4.2BSD 2048 16384 132 # Cyl 0*- 130 e: 8385930 2104515 4.2BSD 2048 16384 328 # Cyl 131 - 652 f: 23294250 48387780 4.2BSD 2048 16384 328 # Cyl 3012 - 4461 h: 4112640 15936480 4.2BSD 2048 16384 256 # Cyl 992 - 1247 i: 2104515 40933620 4.2BSD 2048 163841 # Cyl 2548 - 2678 j: 18828180 20049120 4.2BSD 2048 16384 328 # Cyl 1248 - 2419 k: 5349645 43038135 4.2BSD 2048 16384 16 # Cyl 2679 - 3011 l: 2056320 38877300 4.2BSD 2048 16384 128 # Cyl 2420 - 2547 m: 2104515 10490445 4.2BSD 2048 16384 132 # Cyl 653 - 783
Re: Invalid partition table (was /usr/obj partition AWOL)
This is very odd on several fronts. First, someone has obviously been writing on the MBR for no good reason. I just tested an fdisk compiled to day and noticed no oddities on my i386. Second, the fact that you find a disklabel. Since we no longer store or look for disklabels in FreeBSD partitions it is being read from sector 1 if I recall the code correctly. But it should not have been writing the disklabel there when there was an OpenBSD partition to store it in. Do you know if this is exactly the same disklabel you were using before? Have you changed anything in the disklabel recently that would identify this as an artifact that just happened to be lying in sector 1 for a while? Can you copy the MBR and send it to me. There might be a clue as to what overwrote it. Then I would do fdisk -i and see what happens. This will move the OpenBSD partition to partition 3, but cover the entire disk as your original MBR did. Then see if the disklabel, which should be read from the OpenBSD partition says. Ken On Fri, Jun 08, 2007 at 09:08:21PM -0500, Emilio Perea wrote: On Thu, Jun 07, 2007 at 04:58:18PM -0500, Emilio Perea wrote: On Thu, Jun 07, 2007 at 07:50:24PM +0200, Otto Moerbeek wrote: I have thinking a bit more about the problem, and it is very likely the following scenario happened: 1. Kernel upgrade by source. 2. Reboot 3. Kernel reads old disklabel format and converts it in-memory to the new v1 format. 4. Run a newfs using the old executable that does not know about the new disklabel format. newfs writes the block and fragment size info the old way, on a spot that is used in v1 labels to store the high 16 bits of the offset and size of a partition. The label is written with version = 1, since the in-memory copy is v1. 5. Reboot, the kernel now sees a v1 disklabel with very high offset and/or size, the new consistency code (which is now disabled) kicks in and marks the partition as unused. So the lesson here is: keep userland and kernel in sync, or use a snapshot to upgrade. I believe that's exactly what happened the first time. The catch is that kernel and userland were being built from the same cvs update, and I thought I was keeping them in sync. In this case it would probably have been better to skip the reboot between building the kernel and the userland. It might have been better to start a whole new thread, but it seemed logical to believe that the problems might be related. Using recent snapshots, last night's insecurity output showed another disklabel change: == sd1 diffs (-OLD +NEW) == --- /var/backups/disklabel.sd1.currentFri Apr 20 01:31:19 2007 +++ /var/backups/disklabel.sd1Fri Jun 8 01:31:55 2007 @@ -1,4 +1,4 @@ -# Inside MBR partition 0: type A6 start 63 size 71681967 +disklabel: warning, DOS partition table with no valid OpenBSD partition # /dev/rsd1c: type: SCSI disk: da0s1 *--* The full output of disklabel and dmesg follow, but as I was getting ready to send it, I remembered that this same disk had problems with the disklabel changes last October. For some reason it was shown as having a FreeBSD disklabel. Most of correspondence regarding it was off-list, but involved several developers and ended with Ken Westerback suggesting some tests before setting it to OpenBSD. This was fdisk then: Disk: sd1 geometry: 4462/255/63 [71682030 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ] *0: A60 1 1 - 4461 254 63 [ 63:71681967 ] OpenBSD 1: 000 0 0 -0 0 0 [ 0: 0 ] unused 2: 000 0 0 -0 0 0 [ 0: 0 ] unused 3: 000 0 0 -0 0 0 [ 0: 0 ] unused This is now: Disk: sd1 geometry: 4462/255/63 [71687370 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ] 0: 000 0 0 -0 0 0 [ 0: 0 ] unused 1: 000 0 0 -0 0 0 [ 0: 0 ] unused 2: 000 0 0 -0 0 0 [ 0: 0 ] unused *3: A50 0 1 -3 28 41 [ 0: 5 ] FreeBSD *--* It is currently working fine. Should I just change the partition ID to A6, or is there something else I should try first? *--* disklabel: warning, DOS partition table with no valid OpenBSD partition # /dev/rsd1c:
Re: PPPoE MTU Problem
Will , PPPoE needs a MTU of 1492 , i had the same problem with other values Give it a try. Marcos - Original Message - From: Will Jenkins [EMAIL PROTECTED] To: misc@openbsd.org Sent: Friday, June 08, 2007 9:49 PM Subject: Re: PPPoE MTU Problem On 9 Jun 2007, at 00:11, Stuart Henderson wrote: On 2007/06/08 23:44, Jason McIntyre wrote: On Fri, Jun 08, 2007 at 04:36:28PM +0100, Will Jenkins wrote: I've been experiencing some strange problems. I have a PPPoE/PPPoA bridging ethernet modem in the UK and am using userland ppp to connect to my DSL provider. I have been setting MTU/MRU to 1458 in ppp.conf and have been getting a *lot* of these messages: ppp[18688]: tun0: Error: ip_Input: deflink: wrote 1429, got Message too long no answers for you, but here are some stuff i would mess with: - kernel pppoe(4) (much nicer ;) seconded, it works nicely on BT-based lines in .uk for me (some of the LLU providers only do PPPoA though). I found it a lot easier to get working than using ppp(8), and I'm not exactly new to ppp(8)... I actually started with kernel pppoe and it worked great for two hours and then died inexplicably. The connection then refused to come up after repeated reboots which I found very strange. I went back to my Netgear for a few days and then tried OBSD again. This time the connection held for 5 days and died. Again repeated reboots wouldn't coax the connection back to life but my Netgear router worked fine. I thought I'd try userland ppp because my intuition leads me to believe it may be able to handle odd connection drops etc more robustly. Also I can't work out how to get any kind of logs from kernel pppoe. Will
Re: Invalid partition table (was /usr/obj partition AWOL)
c: 7168196763 unused 0 0 # Cyl 0*- 4461 d: 210445263 4.2BSD 2048 16384 132 # Cyl 0*- 130 Ah -- your 'c' partition does not start at 0. It's an old FreeBSD partition on your disk. That should not work; it is bunk. We are removing the code from the kernel that allows it to work, because it requires extra stupid checks all over the place to support an old 386BSD stupidity. I hope that our new disklabel command, upon re-writing that label, will repair that. Todd? That's the way to handle this, right?
Re: need a machine for an itanium port
One more just donated $100. And here's another one. Ditto. -Martin -- Suburbia is where the developer bulldozes out the trees, then names the streets after them. --Bill Vaughan
Re: Invalid partition table (was /usr/obj partition AWOL)
On 6/8/07, Theo de Raadt [EMAIL PROTECTED] wrote: c: 7168196763 unused 0 0 # Cyl 0*- 4461 d: 210445263 4.2BSD 2048 16384 132 # Cyl 0*- 130 Ah -- your 'c' partition does not start at 0. It's an old FreeBSD partition on your disk. That should not work; it is bunk. We are removing the code from the kernel that allows it to work, because it requires extra stupid checks all over the place to support an old 386BSD stupidity. It appears I have the very same issue, though with a much larger offset. I created an OpenBSD partition on an existing partition table towards the end of the drive. [EMAIL PROTECTED]:~ sudo fdisk wd0 Disk: wd0 geometry: 11978/255/63 [192426570 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ] 0: E8 15356 77 8 - 229721 118 4 [ 246698998: 3443776305 ] Unknown ID 1: 010 0 1 - 267349 89 4 [ 0: 0 ] DOS FAT-12 2: 000 0 0 -0 0 0 [ 0: 0 ] unused 3: 3F0 0 1 - 267349 89 4 [ 0: 0 ] Unknown ID [EMAIL PROTECTED]:~ sudo disklabel wd0 # /dev/rwd0c: type: ESDI disk: ad0s3 label: flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 255 sectors/cylinder: 16065 cylinders: 11978 total sectors: 192426570 rpm: 3600 interleave: 1 trackskew: 0 cylinderskew: 0 headswitch: 0 # microseconds track-to-track seek: 0 # microseconds drivedata: 0 8 partitions: # sizeoffset fstype [fsize bsize cpg] a:208845 17395 4.2BSD 2048 16384 13 # Cyl 9683 - 9695 b: 4192965 155766240swap # Cyl 9696 - 9956 c: 36869175 17395 unused 0 0 # Cyl 9683 - 11977 d:401625 159959205 4.2BSD 2048 16384 25 # Cyl 9957 - 9981 e: 20964825 160360830 4.2BSD 2048 16384 328 # Cyl 9982 - 11286 f: 11100915 181325655 4.2BSD 2048 16384 328 # Cyl 11287 - 11977 disklabel: warning, unused partition i: size 1413615339 offset -2147417768 disklabel: warning, unused partition j: size -196918 offset 402701520 disklabel: warning, unused partition k: size 503365533 offset 1463353529 disklabel: warning, unused partition l: size -1407327343 offset -1382830702 disklabel: warning, unused partition m: size -2013104760 offset -1065155243 disklabel: warning, unused partition n: size 402998726 offset 268977606 disklabel: warning, unused partition o: size -400023365 offset 17760440 disklabel: warning, unused partition p: size 1086332943 offset -356507121 [EMAIL PROTECTED]:~ Jimmy.
Re: Invalid partition table (was /usr/obj partition AWOL)
On Fri, Jun 08, 2007 at 10:41:40PM -0400, Kenneth R Westerback wrote: This is very odd on several fronts. First, someone has obviously been writing on the MBR for no good reason. I just tested an fdisk compiled to day and noticed no oddities on my i386. Second, the fact that you find a disklabel. Since we no longer store or look for disklabels in FreeBSD partitions it is being read from sector 1 if I recall the code correctly. But it should not have been writing the disklabel there when there was an OpenBSD partition to store it in. Do you know if this is exactly the same disklabel you were using before? Have you changed anything in the disklabel recently that would identify this as an artifact that just happened to be lying in sector 1 for a while? Other than reducing the size of the last partition a couple of months ago, there has been no (intentional) change to that disklabel since: On Wed, Oct 11, 2006 at 08:09:08AM -0700, K WESTERBACK wrote: Darn. A perfectly good theory shot to hell. :-). It would seem that you have a 'valid' disklabel at sector 1 of that disk. First, if you could save the first two sectors of the disk with dd if=/dev/rsd1c of=SaveMySectors bs=512 count=2 and send me that file, and do two experiments, I would appreciate it. If you can run fdisk against the disk and change the partition type to 'A6' (OpenBSD) the correct disklabel should be read in and you should get the 'old' info back again. Second, if you are the risk taking type, change partition type back to 'A5' (FreeBSD) and zero out sector 1 on the disk with something like dd if=/dev/zero of=/dev/rsd1c bs=512 count=1 seek=1 Then see what disklabel says. You should get a simple spoofed disklabel with 'c' and 'i' partitions. Finally, changing the partition type to 'A6' again should give you access to the data. That was the last change I'm aware of. Can you copy the MBR and send it to me. There might be a clue as to what overwrote it. Then I would do fdisk -i and see what happens. This will move the OpenBSD partition to partition 3, but cover the entire disk as your original MBR did. Then see if the disklabel, which should be read from the OpenBSD partition says. I'll send the file attached to the next message, since I assume it would be stripped from the mailing list. After running fdisk -i sd1: # fdisk sd1 Disk: sd1 geometry: 4462/255/63 [71687370 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ] 0: 000 0 0 -0 0 0 [ 0: 0 ] unused 1: 000 0 0 -0 0 0 [ 0: 0 ] unused 2: 000 0 0 -0 0 0 [ 0: 0 ] unused *3: A60 1 1 - 4461 254 63 [ 63:71681967 ] OpenBSD It's back as an OpenBSD disklabel, but the c partition still starts at 63 rather than 0: # disklabel sd1 # Inside MBR partition 3: type A6 start 63 size 71681967 # /dev/rsd1c: type: SCSI disk: da0s1 label: flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 255 sectors/cylinder: 16065 cylinders: 4462 total sectors: 71687370 rpm: 3600 interleave: 1 trackskew: 0 cylinderskew: 0 headswitch: 0 # microseconds track-to-track seek: 0 # microseconds drivedata: 0 15 partitions: # sizeoffset fstype [fsize bsize cpg] c: 7168196763 unused 0 0 # Cyl 0*- 4461 d: 210445263 4.2BSD 2048 16384 132 # Cyl 0*- 130 e: 8385930 2104515 4.2BSD 2048 16384 328 # Cyl 131 - 652 f: 23294250 48387780 4.2BSD 2048 16384 328 # Cyl 3012 - 4461 h: 4112640 15936480 4.2BSD 2048 16384 256 # Cyl 992 - 1247 i: 2104515 40933620 4.2BSD 2048 163841 # Cyl 2548 - 2678 j: 18828180 20049120 4.2BSD 2048 16384 328 # Cyl 1248 - 2419 k: 5349645 43038135 4.2BSD 2048 16384 16 # Cyl 2679 - 3011 l: 2056320 38877300 4.2BSD 2048 16384 128 # Cyl 2420 - 2547 m: 2104515 10490445 4.2BSD 2048 16384 132 # Cyl 653 - 783 n: 2056320 12594960 4.2BSD 2048 163841 # Cyl 784 - 911 Emilio