Re: photo/ image viewing software

2008-02-02 Thread Predrag Punosevac

Jason Beaudoin wrote:

Cheap USB memory card readers are well recognized as a mass storage
device and probably should be
the last resort for the most stubborn  digital cameras.



agreed.

  

Personally, I use Sony Cybershot DSC-W70.  Unfortunately the camera can
not be mounted directly as a file system.
As  with  quite a  few  Sony  cameras the  trick  is to put the camera
into PTP mode. Once in
PTP mode camera memory can be accessed by gphoto2 command line and
library of drivers program. I believe that fancy GUI applications
as gtkam and digkam are using the same library of drivers. Other people
on the list probably correct me if I am wrong.



I dunno what luck you've had, but I always ran into problems when
trying to transfer movies (and I think larger photos). but as you
pointed out.. cheap flash readers work to resolve this.

  
In my experience it is even funny to think of gphoto2 code quality  in 
the sense  in  which  we are used in OpenBSD world.


On occasion, I had to issue commands multiple times to get things 
downloaded  as the gphoto2 would fail to execute them. I have never had 
more serous troubles than that. I have downloaded quite a bit of my 
family's photos and movies since my first daughter was born.  Probably  
50Gb for the past 10 months:-)


Cheers,
Predrag





regards,
~Jason




pkg_delete: removing the resulting port/package file

2008-02-02 Thread Juan Miscaro
When I install by port a package is first built.  When deleting the
package with pkg_delete the package is removed (no longer installed)
but that built package file remains.  Is there any way to get rid of it
during the deletion?  I'm running the latest snapshot.

/juan


  Looking for the perfect gift? Give the gift of Flickr! 

http://www.flickr.com/gift/



hotplugd: detach script needed?

2008-02-02 Thread Chris
My USB drive and camera get automagically mounted by hotplugd attach
script. I was wondering if I need to write a detach script as well.
Bob Beck mentioned in his undeadly post that the detach script is not
really needed.

Could anyone shed some light on this please? Thanks.



Re: photo/ image viewing software

2008-02-02 Thread Jason Beaudoin
> Cheap USB memory card readers are well recognized as a mass storage
> device and probably should be
> the last resort for the most stubborn  digital cameras.

agreed.

> Personally, I use Sony Cybershot DSC-W70.  Unfortunately the camera can
> not be mounted directly as a file system.
> As  with  quite a  few  Sony  cameras the  trick  is to put the camera
> into PTP mode. Once in
> PTP mode camera memory can be accessed by gphoto2 command line and
> library of drivers program. I believe that fancy GUI applications
> as gtkam and digkam are using the same library of drivers. Other people
> on the list probably correct me if I am wrong.

I dunno what luck you've had, but I always ran into problems when
trying to transfer movies (and I think larger photos). but as you
pointed out.. cheap flash readers work to resolve this.


regards,
~Jason



Re: anyone have a port of cacti?

2008-02-02 Thread Brian

Richard Daemon wrote:

anyone have a port of cacti?
www.cacti.net
  

Heres a link to the freebsd port if you want to have a hack at it..
http://www.freebsd.org/cgi/cvsweb.cgi/ports/net-mgmt/cacti/

Brian



Re: Using Altq?

2008-02-02 Thread Chris Kuethe
On Feb 2, 2008 3:17 PM, Brian <[EMAIL PROTECTED]> wrote:
> * How do I determine my actual up and down provided to me from my service
>   provider?

The way I did it was to find a very popular torrent with lots of
seeders and leechers (a new linux distro would suffice) and leech as
much as possible (use rtorrent to throttle to 1KB/s up, but unlimit
down). This eventually gave me an indication of the maximum download
speed I'd likely ever see. Once I had some people fetching chunks of
the distro from me, I turned up

> * How do I make a decision as to what queue method to use: cbq, priq, or hfsc?

Try each of them and see. PRIQ made it easy to say "certain types of
traffic take precedence over others, make sure you handle all the ssh
before any bittorrent, and by the way, you can only send up to
_kbps."

> Basically, I want to attempt to avoid getting watchdog timeouts on my
> bittorrent connections.

Get a better NIC or a NIC with a better driver? I've used re(4),
nfe(4), sis(4), fxp(4), and em(4) with bittorrent all without watchdog
timeouts. And when I got the re(4), it was less than $20 for something
that could do better than 100Mbps. Try acpi like Daniel suggests?

-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?



anyone have a port of cacti?

2008-02-02 Thread Richard Daemon
anyone have a port of cacti?
www.cacti.net



Re: dhcp error message

2008-02-02 Thread Richard Daemon
On Feb 2, 2008 2:49 PM, Stefan Kell <[EMAIL PROTECTED]> wrote:

> Hello,
>
> On Fri, 1 Feb 2008, Jim M wrote:
>
> > Sorry I wasn't clear.  What my mind was thinking wasn't coming across.
>  I
> > hope this helps.
> >
> > I have a firewall that runs on a Sun Ultra 5.  It is a dhcp client on
> the
> > WAN side and a dhcp server inside the house.  The firewall connects to a
> > switch that has several things connected to it including other computers
> > (running various operating systems), switches that service other parts
> of
> > the house and a Linksys wireless G access point.
> >
> > I have a company HP laptop that runs Windows XP.  The laptop has a built
> > in 802.11 capability and a PCMCIA card.  The card works fine, but the
> > built in will get through the WAP fine, but won't get an IP address from
> > the firewall.
> >
> > Is there some log file where I can look for error messages to try to
> > troubleshoot this.
> >
> > Thanks again, and I hope this helps explain things.
> >
> >   Original Message 
> >  Subject: Re: dhcp error message
> >  From: Joachim Schipper <[EMAIL PROTECTED]>
> >  Date: Fri, February 01, 2008 8:46 am
> >  To: Jim M <[EMAIL PROTECTED]>
> >
> >  On Thu, Jan 31, 2008 at 07:38:26PM -0700, Jim M wrote:
> >  > my /var/log/messages file is filled over and over with the line
> >  > (obviously the date/time varies)
> >  >
> >  > Jan 31 20:17:00 balrog dhclient: send_fallback: No route to host
> >  >
> >  > The machine is a firewall and has no graphic capabilities. It is a
> >  dhcp
> >  > client to get my the IP address for the home network and a dhcp
> >  server
> >  > for all the machines in the house. What does this error message
> >  mean?
> >  > The firewall works fine as the default router for all the wired
> >  Ethernet
> >  > machines in the house. But, I have laptop with built in 802.11 and
> >  a
> >  > PCMCIA card as well. When I use the PCMCIA card, everything works
> >  fine.
> >  > With the built in 802.11, however, it connects to the WAP, but does
> >  not
> >  > get an IP address from the firewall. I can't figure out why the
> >  > difference and would appreciate any advice on how to troubleshoot
> >  this.
> >
> >  I'm not certain this is useful, but that *is* the message you get if
> >  pf
> >  blocks a packet. However, dhclient does some unusual stuff to be able
> >  to
> >  send packets even when the interface is down, and usually bypasses pf
> >  because of that.
> >
> >  Otherwise, it's not really clear to me which host is which and which
> >  host is doing what, so I'm afraid I can't really help you. A little
> >  clarification sent to the list might be useful here.
> >
> >  Joachim
> >
>
> that is a classic: dhcp uses UDP broadcasts which usually are not
> forwarded, your AP is not your dhcp-server and so the dhcp request will
> reach the AP but not your firewall.
>
> Three solutions: dhcp relay agent on your AP (if possible) or configure
> your AP to forward broadcasts or use a dhcp server on your AP with a
> different IP range.
>
> Try any search machine with "dhcp relay" and you will find answers.
>
> Regards
>
> Stefan Kell
>
> What I don't get is why does the PCMCIA wireless work ok and not the
onboard? I assume the PCMCIA also gets it's IP from the AP.



ntop -w disabled due to security issues...?

2008-02-02 Thread Richard Daemon
Is there a way to still use this, locally or in a more secure manner or by
some other means with the same results as would be with -w working?

TIA.



Re: Using Altq?

2008-02-02 Thread Daniel Melameth
On 2/2/08, Brian <[EMAIL PROTECTED]> wrote:
> Basically, I want to attempt to avoid getting watchdog timeouts on my
> bittorrent connections.

altq will not help you with this.  This is an IRQ, driver or hardware
problem.  I would suggest trying an ACPI kernel (see archives), filing
a bug report or using a different hardware/driver combination.



Re: [Fwd: [Fwd: setting up a noiseless workstation]]

2008-02-02 Thread scott
The C3&7 per-watt performance is outstanding; however, their benchmark
performance, exclusive of crypto and/or multimedia acceleration, is not
on par with like MHz intel or amd processors.

The amd turion is the benchmark *AND* per-watt performance king.

Yes, there are desktop turion-compatible motherboards.

I know firsthand that as a openbsd+pf+vpn gateway the C7+motherboard
w/crypto acceleration runs circles around intel and amd at similar price
points (VIA NAB 7xxx).

I do not know firsthand the userland bounce you [may] get with some of
the embedded multimedia acceleration available in VIA platforms.


-Original Message-
From: Imre Oolberg <[EMAIL PROTECTED]>
To: misc@openbsd.org
Subject: [Fwd: [Fwd: setting up a noiseless workstation]]
Date: Sun, 03 Feb 2008 01:23:08 +0200

But I am surprised people aint using much VIA low-power offerings like 
C3, Eden or C7 in a form of mini-itx motherboard.



Using Altq?

2008-02-02 Thread Brian
I read the following document:

http://www.undeadly.org/cgi?action=article&sid=20061109202501

and I understand the general concepts, but I have a few questions.

* How do I determine my actual up and down provided to me from my service 
  provider?  

* How do I make a decision as to what queue method to use: cbq, priq, or hfsc?
  

Basically, I want to attempt to avoid getting watchdog timeouts on my
bittorrent connections.

Thanks,

Brian



  

Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 



Re: Prolific USB-Serial Controller

2008-02-02 Thread Okan Demirmen
On Sun 2008.02.03 at 10:28 +1100, Chris wrote:
> On Feb 3, 2008 10:22 AM, johan beisser <[EMAIL PROTECTED]> wrote:
> > You may hit space or enter.
> 
> I did but looks like it just hangs in there - jammed. Nothing happens.
> 
> > Sometimes it just has to wake up. Cisco,
> > by default, uses 9600 8,N,1 if i remember correctly.
> 
> Yes. You are right.

did you say cisco - do you have the correct cable, a rollover? (or
pin-out in your adapter)

> > Is there any dmesg output related to the USB serial controller?
> 
> Yep. Here's /var/log/messages output -
> 
> Feb  3 10:19:57 red /bsd: uplcom0 at uhub1 port 2
> Feb  3 10:19:57 red /bsd:
> Feb  3 10:19:57 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
> Controller, rev 1.10/3.00, addr 2
> Feb  3 10:19:57 red /bsd: ucom0 at uplcom0
> 
> Thanks.



Re: [Fwd: [Fwd: setting up a noiseless workstation]]

2008-02-02 Thread Zbigniew Baniewski
On Sun, Feb 03, 2008 at 01:23:08AM +0200, Imre Oolberg wrote:

> But I am surprised people aint using much VIA low-power offerings like 
> C3, Eden or C7 in a form of mini-itx motherboard.

I was using during almost 2 years VIA C3-700 - and this one didn't need any
cooler (the stronger ones needed...) - but it had, in practice, less power
than Pentium II 400. Which is fanless as well.
-- 
pozdrawiam / regards

Zbigniew Baniewski



Re: Prolific USB-Serial Controller

2008-02-02 Thread Chris
On Feb 3, 2008 10:22 AM, johan beisser <[EMAIL PROTECTED]> wrote:
> You may hit space or enter.

I did but looks like it just hangs in there - jammed. Nothing happens.

> Sometimes it just has to wake up. Cisco,
> by default, uses 9600 8,N,1 if i remember correctly.

Yes. You are right.

> Is there any dmesg output related to the USB serial controller?

Yep. Here's /var/log/messages output -

Feb  3 10:19:57 red /bsd: uplcom0 at uhub1 port 2
Feb  3 10:19:57 red /bsd:
Feb  3 10:19:57 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
Controller, rev 1.10/3.00, addr 2
Feb  3 10:19:57 red /bsd: ucom0 at uplcom0

Thanks.



[Fwd: [Fwd: setting up a noiseless workstation]]

2008-02-02 Thread Imre Oolberg

Hi!

Thank you all for your feedback on my question about noiseless
workstation and providing details of your setups and links to
appropriate places! Idea about connecting keyboard, mouse and monitor 
with looong cables is clearly thinking outside a box! :) Once i even 
though myself about it but had forgotten, in fact i my case it is 
possible to use not only room nearby but below (or upstairs, but attic 
probably heats up a lot during summer).


One thing is sure, i am looking now at my currect 700 MHz Celeron with
much more confidence because as i learned surely so called older PC is 
one viable option to make a noiseless setup. And i most probably just 
find me a PCI video adapter which can do 1920x1200 over DVI, i am 
surprised, but they seem to exist. Someplace the reasoning behind their 
existance was that since usually there is only one slot for ordinary AGP 
adapter then people needing dualhead with little bit older computers 
have their only choice using a PCI slot for the other graphic adapter.


But I am surprised people aint using much VIA low-power offerings like 
C3, Eden or C7 in a form of mini-itx motherboard.


And thank you very much for your attention!


Best regards,

Imre


 Original Message 
Subject: setting up a noiseless workstation
Date: Fri, 01 Feb 2008 20:16:49 +0200
From: Imre Oolberg <[EMAIL PROTECTED]>
To: misc@openbsd.org

Hallo!

I am thinking of setting up for myself a noiseless workstation ie
without moving parts or at least with minimal amount of them. The
intension is to make it an X-terminal booting from local network,
preferable root-over-nfs thru pxe since i am most familiar with it
compared to flash memory disks etc.

With last 4.2 CD set and shirt came nice set of bulletins on Soekris and
Liantec computers. As i understood, Soekris is more for networking
hub-firewall and Liantec could be more appropriate for workstation,
espesially because it seems to be more so-to-say PC-like, has gigabit
ports and more options for graphics.

My main concern is how to accomodate 24" 1920x1200 monitor (LCD 24"
Samsung 245T S-PVA or something similar) with it, my main tools i intend
to use there are browser, xterm, etc and not computer aided design or
something requireing exeptional precision and picture quality but of
course, picture needs to be clear and stable.

I noticed the thing called Tiny-Bus from Liantec which can accomodate
some kind of graphic adapters

http://www.liantec.com/product/tbm/TBM_DVE.htm

but i am not sure it is the best chioce to build on. As an operating
system my first choice would OpenBSD and second is Linux. In fact at the
moment i run such a kind of setup using Linux but i feel need to upgrade
my hardware, i have old 700 MHz Celeron, 19" monitor (1024x768) and
100MBit/s network.

I would be very thankful if somebody could share their experience about
putting together such a kind of computer or what do you recommend.


Best regards,
Imre Oolberg

I called today some local shops and it seems my only option is to order
this computer from internet, as a whole or by parts.



Re: Prolific USB-Serial Controller

2008-02-02 Thread johan beisser

On Feb 2, 2008, at 3:17 PM, Chris wrote:


On Feb 3, 2008 9:27 AM, johan beisser <[EMAIL PROTECTED]> wrote:

C) to use cu(1) with a USB serial: "cu -l /dev/cuaU0"


I tried "cu -l /dev/cuaU0", "cu -l /dev/cuaU0 -s 9600" - it says
"Connected" after that nothing happens. Should I try changing the baud
rate? This Cisco 3950 switch is usually connected at 9600 baud rate
via serial console. Here's /var/log/aculog -


You may hit space or enter. Sometimes it just has to wake up. Cisco,  
by default, uses 9600 8,N,1 if i remember correctly.



/var/log/aculog -

chris (Sun Feb  3 10:05:04 2008)  call completed
chris (Sun Feb  3 10:09:06 2008)  call  
terminated

chris (Sun Feb  3 10:09:08 2008)  call completed


Is there any dmesg output related to the USB serial controller?



Re: Prolific USB-Serial Controller

2008-02-02 Thread Chris
On Feb 3, 2008 9:27 AM, johan beisser <[EMAIL PROTECTED]> wrote:
> C) to use cu(1) with a USB serial: "cu -l /dev/cuaU0"

I tried "cu -l /dev/cuaU0", "cu -l /dev/cuaU0 -s 9600" - it says
"Connected" after that nothing happens. Should I try changing the baud
rate? This Cisco 3950 switch is usually connected at 9600 baud rate
via serial console. Here's /var/log/aculog -

/var/log/aculog -

chris (Sun Feb  3 10:05:04 2008)  call completed
chris (Sun Feb  3 10:09:06 2008)  call terminated
chris (Sun Feb  3 10:09:08 2008)  call completed

Thanks.



Re: Prolific USB-Serial Controller

2008-02-02 Thread Okan Demirmen
On Sun 2008.02.03 at 08:57 +1100, Chris wrote:
> On Feb 2, 2008 10:29 PM, Marc Balmer <[EMAIL PROTECTED]> wrote:
> > > /dev/ttyU0
> > you should use /dev/cuaU0 for "dial-out".
> 
> Thanks. I tried both /dev/ttyU0 and /dev/cuaU0 in minicom. They both
> seem to go to the "initializing modem" phase but when I turn on the
> switch with "/dev/cuaU0" configuration, minicom doesn't show anything
> on the screen and minicom with /dev/ttyU0 configuration throws out
> garbage characters on the screen -
> 
> ..5%(.!3..=.3'=./A-#-.'!=7A/5'.5;!!. .-.9/.('5.
> ..5%((W/5(3!''!.-#1(9!%%=#7.(.-''(-#-.-='-53'=./(3-'5.
> ..5%(/=.(;55#(-#.5..57(.!.!(-#-.-='-.=..=..9..9.9.O%!75%(3-
> 
> Here's my minicom rc file -
> 
> pu port /dev/ttyU0
> pu baudrate  9600
> pu bits 8
> pu parity   N
> pu stopbits 1

try "cu -l cuaU0" - man 1 cu.

also, what is the speed of the serial console on your switch?  verify
what that the default is, then apply -s accordingly.  you may also toy
around with tip(1).



Re: Prolific USB-Serial Controller

2008-02-02 Thread johan beisser
A) don't bother initializing a modem. Forget minicom. It's nearly  
useless for what you're doing.


B) openbsd has a utility built in to do just these kinds of things:  
"cu(1)"


C) to use cu(1) with a USB serial: "cu -l /dev/cuaU0"




On Feb 2, 2008, at 1:57 PM, Chris wrote:


On Feb 2, 2008 10:29 PM, Marc Balmer <[EMAIL PROTECTED]> wrote:

/dev/ttyU0

you should use /dev/cuaU0 for "dial-out".


Thanks. I tried both /dev/ttyU0 and /dev/cuaU0 in minicom. They both
seem to go to the "initializing modem" phase but when I turn on the
switch with "/dev/cuaU0" configuration, minicom doesn't show anything
on the screen and minicom with /dev/ttyU0 configuration throws out
garbage characters on the screen -

..5%(.!3..=.3'=./A-#-.'!=7A/5'.5;!!. .-.9/.('5.
..5%((W/5(3!''!.-#1(9!%%=#7.(.-''(-#-.-='-53'=./(3-'5.
..5%(/=.(;55#(-#.5..57(.!.!(-#-.-='-.=..=..9..9.9.O%!75%(3-

Here's my minicom rc file -

pu port /dev/ttyU0
pu baudrate  9600
pu bits 8
pu parity   N
pu stopbits 1

The USB Serial converter is detected as "Prolific Technology Inc.
USB-Serial Controller
rev 1.10/3.00, addr 2" in /var/log/messages.

Thanks for any further help on this issue.




Re: Prolific USB-Serial Controller

2008-02-02 Thread Chris
On Feb 2, 2008 10:29 PM, Marc Balmer <[EMAIL PROTECTED]> wrote:
> > /dev/ttyU0
> you should use /dev/cuaU0 for "dial-out".

Thanks. I tried both /dev/ttyU0 and /dev/cuaU0 in minicom. They both
seem to go to the "initializing modem" phase but when I turn on the
switch with "/dev/cuaU0" configuration, minicom doesn't show anything
on the screen and minicom with /dev/ttyU0 configuration throws out
garbage characters on the screen -

..5%(.!3..=.3'=./A-#-.'!=7A/5'.5;!!. .-.9/.('5.
..5%((W/5(3!''!.-#1(9!%%=#7.(.-''(-#-.-='-53'=./(3-'5.
..5%(/=.(;55#(-#.5..57(.!.!(-#-.-='-.=..=..9..9.9.O%!75%(3-

Here's my minicom rc file -

pu port /dev/ttyU0
pu baudrate  9600
pu bits 8
pu parity   N
pu stopbits 1

The USB Serial converter is detected as "Prolific Technology Inc.
USB-Serial Controller
rev 1.10/3.00, addr 2" in /var/log/messages.

Thanks for any further help on this issue.



Re: booting openbsd on eee without cd-rom

2008-02-02 Thread Niels de Vos
frantisek holop  obiit.org> writes:

> 
> i had a nother idea today, the eee comes with grub...
> the more knowledgable are already holding their heads :]
> 
> because i dont have the boot sector and /boot, i thought
> grub could maybe load bsd.rd
> 
> but all i got was the 'boot too old' message
> well known from the archives.
> 
> it was worth a shot...  is there another boot loader
> that can boot bsd.rd wihout chainbooting?

Well, you could probably use memdisk  to
boot a bsd-floppy.

Good luck,
Niels



Re: Got a panic by ipforwarding

2008-02-02 Thread Claudio Jeker
On Sat, Feb 02, 2008 at 08:17:01PM +0100, Konrad wrote:
> Hey misc,
> 
> so I know there is a better way to posting Bugs. But i not really got
> all information needed to post it to bugs@ or better: i have the
> information in a unpropper way. So I dont really mind if you not
> answer i just thought it would be a nice information that my panic
> happened.
> 
> So I installed OpenBSD as an internet router on a sony vaio laptop
> (dmesg see end of mail). I enabled ip-forwarding and it runs a now a
> hour and then it paniced. Its the first time and it could be that the
> error comes from the hardware.
> 
> Here is a pic from the panic (ddb trace)
> http://www-stud.hs-fulda.org/~gsus/ddb.jpg
> 

> OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007
> [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
> cpu0: mobile AMD Athlon(tm) XP 1600+  ("AuthenticAMD" 686-class, 256KB
> L2 cache) 1.41 GHz
> cpu0: 
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE

...

> ep1 at pcmcia1 function 0 "3Com, Megahertz 574B, B" port 0xa000/32:
> address 00:10:5a:d3:ac:f6
> tqphy0 at ep1 phy 0: 78Q2120 10/100 PHY, rev. 10

Upgrade to -current or replace the ep(4) card. Both should fix this panic.

-- 
:wq Claudio



Re: dhcp error message

2008-02-02 Thread Stefan Kell

Hello,

On Fri, 1 Feb 2008, Jim M wrote:


Sorry I wasn't clear.  What my mind was thinking wasn't coming across.  I
hope this helps.

I have a firewall that runs on a Sun Ultra 5.  It is a dhcp client on the
WAN side and a dhcp server inside the house.  The firewall connects to a
switch that has several things connected to it including other computers
(running various operating systems), switches that service other parts of
the house and a Linksys wireless G access point.

I have a company HP laptop that runs Windows XP.  The laptop has a built
in 802.11 capability and a PCMCIA card.  The card works fine, but the
built in will get through the WAP fine, but won't get an IP address from
the firewall.

Is there some log file where I can look for error messages to try to
troubleshoot this.

Thanks again, and I hope this helps explain things.

  Original Message 
 Subject: Re: dhcp error message
 From: Joachim Schipper <[EMAIL PROTECTED]>
 Date: Fri, February 01, 2008 8:46 am
 To: Jim M <[EMAIL PROTECTED]>

 On Thu, Jan 31, 2008 at 07:38:26PM -0700, Jim M wrote:
 > my /var/log/messages file is filled over and over with the line
 > (obviously the date/time varies)
 >
 > Jan 31 20:17:00 balrog dhclient: send_fallback: No route to host
 >
 > The machine is a firewall and has no graphic capabilities. It is a
 dhcp
 > client to get my the IP address for the home network and a dhcp
 server
 > for all the machines in the house. What does this error message
 mean?
 > The firewall works fine as the default router for all the wired
 Ethernet
 > machines in the house. But, I have laptop with built in 802.11 and
 a
 > PCMCIA card as well. When I use the PCMCIA card, everything works
 fine.
 > With the built in 802.11, however, it connects to the WAP, but does
 not
 > get an IP address from the firewall. I can't figure out why the
 > difference and would appreciate any advice on how to troubleshoot
 this.

 I'm not certain this is useful, but that *is* the message you get if
 pf
 blocks a packet. However, dhclient does some unusual stuff to be able
 to
 send packets even when the interface is down, and usually bypasses pf
 because of that.

 Otherwise, it's not really clear to me which host is which and which
 host is doing what, so I'm afraid I can't really help you. A little
 clarification sent to the list might be useful here.

 Joachim



that is a classic: dhcp uses UDP broadcasts which usually are not 
forwarded, your AP is not your dhcp-server and so the dhcp request will 
reach the AP but not your firewall.


Three solutions: dhcp relay agent on your AP (if possible) or configure 
your AP to forward broadcasts or use a dhcp server on your AP with a 
different IP range.


Try any search machine with "dhcp relay" and you will find answers.

Regards

Stefan Kell



Got a panic by ipforwarding

2008-02-02 Thread Konrad
Hey misc,

so I know there is a better way to posting Bugs. But i not really got
all information needed to post it to bugs@ or better: i have the
information in a unpropper way. So I dont really mind if you not
answer i just thought it would be a nice information that my panic
happened.

So I installed OpenBSD as an internet router on a sony vaio laptop
(dmesg see end of mail). I enabled ip-forwarding and it runs a now a
hour and then it paniced. Its the first time and it could be that the
error comes from the hardware.

Here is a pic from the panic (ddb trace)
http://www-stud.hs-fulda.org/~gsus/ddb.jpg

Here the dmesg:

OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: mobile AMD Athlon(tm) XP 1600+  ("AuthenticAMD" 686-class, 256KB
L2 cache) 1.41 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem  = 267939840 (255MB)
avail mem = 251437056 (239MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 08/13/02, BIOS32 rev. 0 @
0xfd6a0, SMBIOS rev. 2.3 @ 0xdc010 (41 entries)
bios0: vendor Sony Corporation version "R0121K5" date 08/13/2002
bios0: Sony Corporation PCG-FX805(DE)
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 74%
apm0: AC on, battery charge high, charging
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xfd6a0/0x960
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf60/128 (6 entries)
pcibios0: PCI Interrupt Router at 000:07:0 ("VIA VT82C596A ISA" rev 0x00)
pcibios0: PCI bus #3 is the last bus
bios0: ROM list: 0xc/0x1 0xd/0x4000! 0xdc000/0x4000!
cpu0 at mainbus0
cpu0: PowerNow! K7 1401 MHz: speeds: 1400 1200 1000 800 600 500 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT8363 Host" rev 0x03
ppb0 at pci0 dev 1 function 0 "VIA VT8363 AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Mobility 1" rev 0x64
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 "VIA VT82C686 ISA" rev 0x40
pciide0 at pci0 dev 7 function 1 "VIA VT82C571 IDE" rev 0x06: ATA100,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 28615MB, 58605120 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  SCSI0
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
uhci0 at pci0 dev 7 function 2 "VIA VT83C572 USB" rev 0x1a: irq 9
uhci1 at pci0 dev 7 function 3 "VIA VT83C572 USB" rev 0x1a: irq 9
viaenv0 at pci0 dev 7 function 4 "VIA VT82C686 SMBus" rev 0x40: 32-bit
timer at 3579545Hz
auvia0 at pci0 dev 7 function 5 "VIA VT82C686 AC97" rev 0x50: irq 5
ac97: codec id 0x41445348 (Analog Devices AD1881A)
ac97: codec features headphone, Analog Devices Phat Stereo
audio0 at auvia0
"VIA VT82C686 Modem" rev 0x30 at pci0 dev 7 function 6 not configured
cbb0 at pci0 dev 10 function 0 "TI PCI1420 CardBus" rev 0x00: irq 9
cbb1 at pci0 dev 10 function 1 "TI PCI1420 CardBus" rev 0x00: irq 10
"TI TSB12LV26 FireWire" rev 0x00 at pci0 dev 14 function 0 not configured
rl0 at pci0 dev 16 function 0 "Realtek 8139" rev 0x10: irq 10, address
08:00:46:70:66:52
rlphy0 at rl0 phy 0: RTL internal PHY
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: 
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
usb0 at uhci0: USB revision 1.0
uhub0 at usb0: VIA UHCI root hub, rev 1.00/1.00, addr 1
usb1 at uhci1: USB revision 1.0
uhub1 at usb1: VIA UHCI root hub, rev 1.00/1.00, addr 1
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 2 device 0 cacheline 0x8, lattimer 0x20
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 3 device 0 cacheline 0x8, lattimer 0x20
pcmcia1 at cardslot1
biomask ff4d netmask ff4d ttymask ffcf
pctr: user-level cycle counter enabled
mtrr: Pentium Pro MTRR support
ath0 at cardbus0 dev 0 function 0 "Atheros Communications, Inc.,
AR5001--, Wireless LAN Reference Card": irq 9
ath0: AR5213 7.9 phy 4.5 rf2112a 5.6, FCC2A*, address 00:14:6c:21:b5:3e
ep1 at pcmcia1 function 0 "3Com, Megahertz 574B, B" port 0xa000/32:
address 00:10:5a:d3:ac:f6
tqphy0 at ep1 phy 0: 78Q2120 10/100 PHY, rev. 10
uhub2 at uhub0 port 1: Alps Electric Hub in Apple USB Keyboard, rev
1.10/2.10, addr 2
uhidev0 at uhub2 port 1 configuration 1 interface 0
uhidev0: Alps Electric Apple USB Keyboard, rev 1.10/1.02, addr 3, iclass

Re: setting up a noiseless workstation

2008-02-02 Thread Siegbert Marschall
> 2008/2/1, Zbigniew Baniewski <[EMAIL PROTECTED]>:
>> You can use old Pentium II 400 MHz - there are still many of them
>> available,
>> which doesn't need any cooler, its radiator will do. Such way the only
>
> And where do you get a PCI graphics card with DVI capable of doing
> 1920x1200?

Everywhere ? ATI Cards can do that, Matrox can and so on.

http://www.alternate.de/html/product/details.html?articleId=41922

2560x1600 might give you trouble but 1920x1200 is piece of cake.

BUT: Not every DVI-Card works with every DVI/HDMI-Monitor, sometimes
they just don't like each other. Has nothing to do with PCI though.

-sm



Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread johan beisser

On Feb 2, 2008, at 6:32 AM, Wijnand Wiersma wrote:


I don't think bogons are able to complete the TCP handshake since you
don't know how to route back. Filtering those will not make sure there
are less log messages about ssh logins


Not entirely true. Bogons are not supposed to be routed, or routable.  
It doesn't mean someone can't just throw up a BGP advert for a Bogon  
range and start using it, or intentionally spoof addresses from the  
route.




Re: setting up a noiseless workstation

2008-02-02 Thread Christian Weisgerber
Martin Schrvder <[EMAIL PROTECTED]> wrote:

> And where do you get a PCI graphics card with DVI capable of doing 1920x1200?

Matrox Millennium P690 PCI.  X.org doesn't have a driver for it, though.

-- 
Christian "naddy" Weisgerber  [EMAIL PROTECTED]



Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread Wijnand Wiersma
I don't think bogons are able to complete the TCP handshake since you
don't know how to route back. Filtering those will not make sure there
are less log messages about ssh logins

Wijnand



Re: solaris 10. 'most' secure OS?

2008-02-02 Thread Pierre Ancelot
On Sat, 02 Feb 2008 01:24:44 +0100
Peichaer Robert <[EMAIL PROTECTED]> wrote:

> Richard Daemon schrieb:
> > On Feb 1, 2008 5:14 PM, badeguruji <[EMAIL PROTECTED]> wrote:
> > 
> >> From Sun's own mouth:
> >>
> >> ..."Solaris 10 OS, the most secure OS worldwide holding 176
> >> records"...
> >>
> >> is that so?
> >>
> >> 
> >> ~~aapka kalyan ho~~
> >>
> >>
> > 
> > Doesn't MS say the same thing for Vista?
> > 
> 
> compare and realize the difference
> 
> Solaris Alerts on Sun's Security Blog (mind the sheer number of
> alerts for 2008)
>   http://blogs.sun.com/security/category/alerts
> 
> OpenBSD's Security Infos (every release counts for a 6 months period)
>   http://www.openbsd.org/security.html#42


Wait... compare what can really be compared:

http://blogs.sun.com/security/category/alerts shows 4 types of things:

- OS alerts
- System DOS/DDOS vulnerabilities
- Third party software vulnerabilities (WHO ARE IN THE BASE SYSTEM,
say, sendmail for example)
- Third party DOS/DDOS (WHO ARE IN THE BASE SYSTEM, say, sendmail for
example)

http://www.openbsd.org/security.html#42 shows 3 types of things:

- OS alerts
- Third party software vulnerabilities (Including stuff like firefox,
etc...)
- Third party DOS/DDOS (Including stuff like firefox, etc...)

In openbsd world, DOS vulnerabilities are considered are reliability
issues... So, for a good comparison, remove from sun's page all DOS
vulnerabilities (or compare with obsd DOS vulnerabilities) and third
party software (say, firefox, etc...)

If you are looking for the system DOS/DDOS vulnerabilities of openbsd,
it's here: http://www.openbsd.org/errata.html

The fact is, you can't say third party softwares are the system so... 
 - Remove third party software vulns, DOS/DDOS vulns for both OS
 - Add openbsd DOS to it's vulns (or remove solaris DOS vulns)

Now, compare...


Now, does that comparison really means anything ? I don't think so, 
for it to eventually mean anything, you'd have to perform a complete
audit on both openbsd and sun's code, compare the number of relevant
vulnerability report for both systems, check if sun has like openbsd a
pro-active approach of security, comapre the number of users...

Good luck in your quest to answer an unanswerable question...

Pierre Ancelot.



Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread elpinguim
On Sat, Feb 02, 2008 at 12:47:54PM +0100, Martin Schr?der wrote:
> 2008/2/2, elpinguim <[EMAIL PROTECTED]>:
> > On Fri, Feb 01, 2008 at 05:28:11PM +0100, Martin Schr?der wrote:
> > > No. This just adds another way for things to go wrong. KISS. :-)
> >
> > Really, what things?  Script it, set cron to call it, done.  Simple.
> 
> "IP addresses that are bogon today may not be bogon tomorrow."
> 
> http://www.mcanerin.com/EN/articles/bogon-01.asp
> 
> KISS.
> 
> Best
>Martin

Agreed.  Assuming that a bogon list is not tracking the changes 
in ip allocation, then yes, there would be a problem.

-- 
i am jack's annoying signature.



Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread elpinguim
On Sat, Feb 02, 2008 at 05:26:59AM -0600, Tony Abernethy wrote:
> elpinguim wrote:
> > On Fri, Feb 01, 2008 at 05:28:11PM +0100, Martin Schr?der wrote:
> > > 2008/2/1, elpinguim <[EMAIL PROTECTED]>:
> > > > Configuring pf to not even respond to unallocated ip space also
> > > > helps.  Search for Bogon filtering.
> > > 
> > > No. This just adds another way for things to go wrong. KISS. :-)
> > 
> > Really, what things?  Script it, set cron to call it, done.  Simple.
> > 
> What happens when such as http://www.cymru.com/Documents/bogon-list.html
> gets moved to bogon space?
> How do you access information from an address that you insist cannot exist?
> How doe you script things when the format changes?
> 
> At any rate, why bother spoofing from a bogon address?
> It has to be easy to find unused IP addresses in legitimate address blocks.

Assuming that one is relying on a poorly maintained (or abandoned) 
bogons list.  Then, yes I would agree there would be a problem.

But if the bogons list is actively reflecting the changes of ip 
allocation on a daily basis (ie. whois databases from ARIN, RIPE, APNIC) 
as well as the system thats using it.  Would there still be a problem?  Not 
likely.

-- 
i am jack's annoying signature.



Re: low-MHz server

2008-02-02 Thread michael hamerski
Personally, I would look into industrial-grade i386 SBCs. Old server
systems will suck juice, have non-standard weird bits and odds (old
Macs are a great example for RAM) and although I readily admit to
knowing next to nothing about EM shielding, it would seem easier to
shield properly a small box than a sprawling monstrosity.

You can still get i386 systems at or below 200MHz from a bit of googling:

http://www.advantech.gr/products/Model.asp-Category_ID=1-239XES&BU=ECG&PD=.htm

or if you are feeling slightly more adventurous than i386 you might
check OpenBSD/landisk or armish supported kit, although that might be
a bit tight for python.

anyway, hope you can find a good solution.

mike



Re: solaris 10. 'most' secure OS?

2008-02-02 Thread Gilles Chehade
I knew this picture would become handy when I took it at SL2008 ... 

http://www.evilkittens.org/~gilles/pictures/vrac/secure-solaris.jpg

Gilles


On Fri, Feb 01, 2008 at 11:44:10PM +, Bryan wrote:
> That's okay, I saw a presentation that had a quote from RMS talking
> about how Sun is helping the F/OSS movement, and the presentation
> called RMS "an open source evangelist".  Nearly choked to death on my
> lunch from laughing...
> 
> Wish I still had a hand-out from that Sun presentation...  That quote
> would go in my cube right next to my Dilbert comics...
> 
> On Fri, Feb 1, 2008 at 10:59 PM, Daniel Ouellet <[EMAIL PROTECTED]> wrote:
> >
> > Richard Daemon wrote:
> >  > On Feb 1, 2008 5:14 PM, badeguruji <[EMAIL PROTECTED]> wrote:
> >  >
> >  >> From Sun's own mouth:
> >  >>
> >  >> ..."Solaris 10 OS, the most secure OS worldwide holding 176 records"...
> >  >>
> >  >> is that so?
> >  >>
> >  >> 
> >  >> ~~aapka kalyan ho~~
> >  >>
> >  >>
> >  >
> >  > Doesn't MS say the same thing for Vista?
> >
> >  They all say the same thing and they are right in both cases. They just
> >  both remove the footnote that said in both series of tests and
> >  installation where that so, that it is not connected to the Internet.
> >
> >  Neither are wrong in that case.
> 

-- 
Gilles Chehade



Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread Martin Schröder
2008/2/2, elpinguim <[EMAIL PROTECTED]>:
> On Fri, Feb 01, 2008 at 05:28:11PM +0100, Martin Schr?der wrote:
> > No. This just adds another way for things to go wrong. KISS. :-)
>
> Really, what things?  Script it, set cron to call it, done.  Simple.

"IP addresses that are bogon today may not be bogon tomorrow."

http://www.mcanerin.com/EN/articles/bogon-01.asp

KISS.

Best
   Martin



Re: USB harddrive

2008-02-02 Thread Stuart Henderson
On 2008/02/02 11:55, Christian Rudolph wrote:
> I'm using OpenBSD 4.2 on a soekris 4501.

you have to be careful with PCI cards in 4501, the power supply
is very limited, it's quite possible to damage your soekris with the
wrong card.

http://lists.soekris.com/pipermail/soekris-tech/2003-July/003036.html

4801/5501 are more flexible.

> I have attached a USB controller and plugged in a harddrive.
> The problem is, the device doesn't get recognized by OpenBSD.
>
> Then I tried another box and plugged in the same harddrive.
> result: it works.
>
> But I need to run this disk at my soekris box.
>
> Following my dmesg output (working machine):
> $ dmesg
> OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007
> [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
> cpu0: AMD Athlon(tm) XP 2100+ ("AuthenticAMD" 686-class, 256KB L2 cache)
> 1.75 GHz
> cpu0:
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
> real mem  = 536375296 (511MB)
> avail mem = 511008768 (487MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 11/05/02, BIOS32 rev. 0 @ 0xfdae0,
> SMBIOS rev. 2.3 @ 0xf0640 (32 entries)
> bios0: vendor American Megatrends Inc. version "07.00T  " date 11/05/2002
> bios0: Gigabyte Technology Co., Ltd. 7VRXP
> apm0 at bios0: Power Management spec V1.2
> apm0: AC on, battery charge unknown
> apm0: flags 30102 dobusy 0 doidle 1
> pcibios0 at bios0: rev 2.1 @ 0xf/0x1
> pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf7b60/224 (12 entries)
> pcibios0: PCI Interrupt Router at 000:17:0 ("VIA VT8233 ISA" rev 0x00)
> pcibios0: PCI bus #1 is the last bus
> bios0: ROM list: 0xc/0xbc00
> cpu0 at mainbus0
> pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
> pchb0 at pci0 dev 0 function 0 "VIA VT8366 PCI" rev 0x00
> ppb0 at pci0 dev 1 function 0 "VIA VT8366 AGP" rev 0x00
> pci1 at ppb0 bus 1
> vga1 at pci1 dev 0 function 0 "NVIDIA GeForce3 Ti 200" rev 0xa3
> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> ral0 at pci0 dev 12 function 0 "Ralink RT2560" rev 0x01: irq 11, address
> 00:80:5a:33:31:6c
> ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
> viapm0 at pci0 dev 17 function 0 "VIA VT8233A ISA" rev 0x00
> iic0 at viapm0
> maxtmp0 at iic0 addr 0x4c: lm90
> pciide0 at pci0 dev 17 function 1 "VIA VT82C571 IDE" rev 0x06: ATA133,
> channel 0 configured to compatibility, channel 1 configured to compatibility
> wd0 at pciide0 channel 0 drive 0: 
> wd0: 16-sector PIO, LBA48, 39266MB, 80418240 sectors
> wd1 at pciide0 channel 0 drive 1: 
> wd1: 16-sector PIO, LBA, 58644MB, 120103200 sectors
> wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
> wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 5
> atapiscsi0 at pciide0 channel 1 drive 0
> scsibus0 at atapiscsi0: 2 targets
> cd0 at scsibus0 targ 0 lun 0:  SCSI0 5/cdrom
> removable
> cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
> uhci0 at pci0 dev 17 function 2 "VIA VT83C572 USB" rev 0x23: irq 10
> uhci1 at pci0 dev 17 function 3 "VIA VT83C572 USB" rev 0x23: irq 10
> rl0 at pci0 dev 19 function 0 "Realtek 8139" rev 0x10: irq 5, address
> 00:20:ed:3b:65:a2
> rlphy0 at rl0 phy 0: RTL internal PHY
> uhci2 at pci0 dev 20 function 0 "VIA VT83C572 USB" rev 0x50: irq 11
> uhci3 at pci0 dev 20 function 1 "VIA VT83C572 USB" rev 0x50: irq 11
> ehci0 at pci0 dev 20 function 2 "VIA VT6202 USB" rev 0x51: irq 5
> usb0 at ehci0: USB revision 2.0
> uhub0 at usb0: VIA EHCI root hub, rev 2.00/1.00, addr 1
> usb1 at uhci0: USB revision 1.0
> uhub1 at usb1: VIA UHCI root hub, rev 1.00/1.00, addr 1
> usb2 at uhci1: USB revision 1.0
> uhub2 at usb2: VIA UHCI root hub, rev 1.00/1.00, addr 1
> usb3 at uhci2: USB revision 1.0
> uhub3 at usb3: VIA UHCI root hub, rev 1.00/1.00, addr 1
> usb4 at uhci3: USB revision 1.0
> uhub4 at usb4: VIA UHCI root hub, rev 1.00/1.00, addr 1
> isa0 at mainbus0
> isadma0 at isa0
> pckbc0 at isa0 port 0x60/5
> pckbd0 at pckbc0 (kbd slot)
> pckbc0: using irq 1 for kbd slot
> wskbd0 at pckbd0: console keyboard, using wsdisplay0
> pmsi0 at pckbc0 (aux slot)
> pckbc0: using irq 12 for aux slot
> wsmouse0 at pmsi0 mux 0
> pcppi0 at isa0 port 0x61
> midi0 at pcppi0: 
> spkr0 at pcppi0
> lpt0 at isa0 port 0x378/4 irq 7
> it0 at isa0 port 0x290/8: IT87
> npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
> pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
> pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
> fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
> fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
> biomask ef65 netmask ef65 ttymask ffe7
> pctr: user-level cycle counter enabled
> mtrr: Pentium Pro MTRR support
> dkcsum: wd0 matches BIOS drive 0x80
> dkcsum: wd1 matches BIOS drive 0x81
> root on wd0a swap on wd0b dump on wd0b
> umass0 at uhub1 port 1 configuration 1 interface 0
> umass0: JMicron USB to ATA/ATAPI Bridge, rev 2.00/1.00, addr 2
> umass0: using SCSI over Bulk-Only
> scsibus1 at umass0: 2 targets
> sd0 at 

Re: Prolific USB-Serial Controller

2008-02-02 Thread Marc Balmer

Stuart Henderson wrote:


/dev/ttyU0


you should use /dev/cuaU0 for "dial-out".



On 2008/02/02 20:53, Chris wrote:

I am trying to a access a switch connected to a USB-Serial controller
to my laptop's USB port. When I plug in the USB port to my laptop I
get the following in my /var/log/messages. But I am not sure which
/dev/ to use in minicom to access the switch. I can see there
is no /dev/uplcom0 or /dev/ucom0 or /dev/uhub1. I tried /dev/tty00,
/dev/tty01, /dev/tty02, /dev/tty03 and /dev/cua00 but minicom says
device not configured.

Any help would be much appreciated. Thanks.

Feb  2 20:31:58 red /bsd: uplcom0 at uhub1 port 2
Feb  2 20:31:58 red /bsd:
Feb  2 20:31:58 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
Controller, rev 1.10/3.00, addr 2
Feb  2 20:31:58 red /bsd: ucom0 at uplcom0




Re: Prolific USB-Serial Controller

2008-02-02 Thread Marc Balmer

Chris wrote:

I am trying to a access a switch connected to a USB-Serial controller
to my laptop's USB port. When I plug in the USB port to my laptop I
get the following in my /var/log/messages. But I am not sure which
/dev/ to use in minicom to access the switch. I can see there
is no /dev/uplcom0 or /dev/ucom0 or /dev/uhub1. I tried /dev/tty00,
/dev/tty01, /dev/tty02, /dev/tty03 and /dev/cua00 but minicom says
device not configured.


use /dev/cuaU0 (or /dev/cuaU)



Any help would be much appreciated. Thanks.

Feb  2 20:31:58 red /bsd: uplcom0 at uhub1 port 2
Feb  2 20:31:58 red /bsd:
Feb  2 20:31:58 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
Controller, rev 1.10/3.00, addr 2
Feb  2 20:31:58 red /bsd: ucom0 at uplcom0




Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread Tony Abernethy
elpinguim wrote:
> On Fri, Feb 01, 2008 at 05:28:11PM +0100, Martin Schr?der wrote:
> > 2008/2/1, elpinguim <[EMAIL PROTECTED]>:
> > > Configuring pf to not even respond to unallocated ip space also
> > > helps.  Search for Bogon filtering.
> > 
> > No. This just adds another way for things to go wrong. KISS. :-)
> 
> Really, what things?  Script it, set cron to call it, done.  Simple.
> 
What happens when such as http://www.cymru.com/Documents/bogon-list.html
gets moved to bogon space?
How do you access information from an address that you insist cannot exist?
How doe you script things when the format changes?

At any rate, why bother spoofing from a bogon address?
It has to be easy to find unused IP addresses in legitimate address blocks.



Looks like MSFT is pleased that RMS makes software for windows

2008-02-02 Thread Rod Whitworth
In an article at http://blogs.zdnet.com/microsoft/?p=1142 there is an
opinion: "Microsoft is looking at open-source software (OSS) as just
another flavor of independent software vendors (ISV) software.
Microsofts goal is to convince OSS vendors to port their software to
Windows."

Looks like the gnus anticipated the desire for "OSS" at Redmond. If so
RMS was really ahead of his time.   8-))


Rod/
/earth: write failed, file system is full
cp: /earth/creatures: No space left on device



USB harddrive

2008-02-02 Thread Christian Rudolph

Hi,
I'm using OpenBSD 4.2 on a soekris 4501.

I have attached a USB controller and plugged in a harddrive.
The problem is, the device doesn't get recognized by OpenBSD.

Then I tried another box and plugged in the same harddrive.
result: it works.

But I need to run this disk at my soekris box.

Following my dmesg output (working machine):
$ dmesg
OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) XP 2100+ ("AuthenticAMD" 686-class, 256KB L2 cache)
1.75 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem  = 536375296 (511MB)
avail mem = 511008768 (487MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 11/05/02, BIOS32 rev. 0 @ 0xfdae0,
SMBIOS rev. 2.3 @ 0xf0640 (32 entries)
bios0: vendor American Megatrends Inc. version "07.00T  " date 11/05/2002
bios0: Gigabyte Technology Co., Ltd. 7VRXP
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf7b60/224 (12 entries)
pcibios0: PCI Interrupt Router at 000:17:0 ("VIA VT8233 ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0xbc00
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT8366 PCI" rev 0x00
ppb0 at pci0 dev 1 function 0 "VIA VT8366 AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "NVIDIA GeForce3 Ti 200" rev 0xa3
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ral0 at pci0 dev 12 function 0 "Ralink RT2560" rev 0x01: irq 11, address
00:80:5a:33:31:6c
ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
viapm0 at pci0 dev 17 function 0 "VIA VT8233A ISA" rev 0x00
iic0 at viapm0
maxtmp0 at iic0 addr 0x4c: lm90
pciide0 at pci0 dev 17 function 1 "VIA VT82C571 IDE" rev 0x06: ATA133,
channel 0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA48, 39266MB, 80418240 sectors
wd1 at pciide0 channel 0 drive 1: 
wd1: 16-sector PIO, LBA, 58644MB, 120103200 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  SCSI0 5/cdrom
removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 17 function 2 "VIA VT83C572 USB" rev 0x23: irq 10
uhci1 at pci0 dev 17 function 3 "VIA VT83C572 USB" rev 0x23: irq 10
rl0 at pci0 dev 19 function 0 "Realtek 8139" rev 0x10: irq 5, address
00:20:ed:3b:65:a2
rlphy0 at rl0 phy 0: RTL internal PHY
uhci2 at pci0 dev 20 function 0 "VIA VT83C572 USB" rev 0x50: irq 11
uhci3 at pci0 dev 20 function 1 "VIA VT83C572 USB" rev 0x50: irq 11
ehci0 at pci0 dev 20 function 2 "VIA VT6202 USB" rev 0x51: irq 5
usb0 at ehci0: USB revision 2.0
uhub0 at usb0: VIA EHCI root hub, rev 2.00/1.00, addr 1
usb1 at uhci0: USB revision 1.0
uhub1 at usb1: VIA UHCI root hub, rev 1.00/1.00, addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2: VIA UHCI root hub, rev 1.00/1.00, addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3: VIA UHCI root hub, rev 1.00/1.00, addr 1
usb4 at uhci3: USB revision 1.0
uhub4 at usb4: VIA UHCI root hub, rev 1.00/1.00, addr 1
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: 
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
it0 at isa0 port 0x290/8: IT87
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ef65 netmask ef65 ttymask ffe7
pctr: user-level cycle counter enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matches BIOS drive 0x80
dkcsum: wd1 matches BIOS drive 0x81
root on wd0a swap on wd0b dump on wd0b
umass0 at uhub1 port 1 configuration 1 interface 0
umass0: JMicron USB to ATA/ATAPI Bridge, rev 2.00/1.00, addr 2
umass0: using SCSI over Bulk-Only
scsibus1 at umass0: 2 targets
sd0 at scsibus1 targ 1 lun 0:  SCSI2 0/direct fixed
sd0: 476940MB, 60801 cyl, 255 head, 63 sec, 512 bytes/sec, 976773168 sec
total




dmesg output of soekris box:
$ dmesg
OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Am5x86 W/B 133/160 ("AuthenticAMD" 486-class)
cpu0: FPU
real mem  = 66678784 (63MB)
avail mem = 55808000 (53MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 20/41/22, BIOS32 rev. 0 @ 0xf7840
pcibi

Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread elpinguim
On Fri, Feb 01, 2008 at 05:28:11PM +0100, Martin Schr?der wrote:
> 2008/2/1, elpinguim <[EMAIL PROTECTED]>:
> > Configuring pf to not even respond to unallocated ip space also
> > helps.  Search for Bogon filtering.
> 
> No. This just adds another way for things to go wrong. KISS. :-)

Really, what things?  Script it, set cron to call it, done.  Simple.

Kind regards.

-- 
i am jack's annoying signature.



Re: Prolific USB-Serial Controller

2008-02-02 Thread Sigi Rudzio
2008/2/2, Chris <[EMAIL PROTECTED]>:
> I am trying to a access a switch connected to a USB-Serial controller
> to my laptop's USB port. When I plug in the USB port to my laptop I
> get the following in my /var/log/messages. But I am not sure which
> /dev/ to use in minicom to access the switch. I can see there
> is no /dev/uplcom0 or /dev/ucom0 or /dev/uhub1. I tried /dev/tty00,
> /dev/tty01, /dev/tty02, /dev/tty03 and /dev/cua00 but minicom says
> device not configured.
>
> Any help would be much appreciated. Thanks.


for USB-Serial controllers you have to use /dev/cuaU0 (callout) or /dev/ttyU0

Sigi



Re: Prolific USB-Serial Controller

2008-02-02 Thread Stuart Henderson
/dev/ttyU0

On 2008/02/02 20:53, Chris wrote:
> I am trying to a access a switch connected to a USB-Serial controller
> to my laptop's USB port. When I plug in the USB port to my laptop I
> get the following in my /var/log/messages. But I am not sure which
> /dev/ to use in minicom to access the switch. I can see there
> is no /dev/uplcom0 or /dev/ucom0 or /dev/uhub1. I tried /dev/tty00,
> /dev/tty01, /dev/tty02, /dev/tty03 and /dev/cua00 but minicom says
> device not configured.
> 
> Any help would be much appreciated. Thanks.
> 
> Feb  2 20:31:58 red /bsd: uplcom0 at uhub1 port 2
> Feb  2 20:31:58 red /bsd:
> Feb  2 20:31:58 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
> Controller, rev 1.10/3.00, addr 2
> Feb  2 20:31:58 red /bsd: ucom0 at uplcom0



Prolific USB-Serial Controller

2008-02-02 Thread Chris
I am trying to a access a switch connected to a USB-Serial controller
to my laptop's USB port. When I plug in the USB port to my laptop I
get the following in my /var/log/messages. But I am not sure which
/dev/ to use in minicom to access the switch. I can see there
is no /dev/uplcom0 or /dev/ucom0 or /dev/uhub1. I tried /dev/tty00,
/dev/tty01, /dev/tty02, /dev/tty03 and /dev/cua00 but minicom says
device not configured.

Any help would be much appreciated. Thanks.

Feb  2 20:31:58 red /bsd: uplcom0 at uhub1 port 2
Feb  2 20:31:58 red /bsd:
Feb  2 20:31:58 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
Controller, rev 1.10/3.00, addr 2
Feb  2 20:31:58 red /bsd: ucom0 at uplcom0



Re: photo/ image viewing software

2008-02-02 Thread Clint Pachl

Chris wrote:

I am after a software that would allow me to view photos from my
digital camera which I usually mount in /mnt/camera. I tried from the
ports tree: digikam, gphoto, gtkam, kphotoalbum, wmphoto, kamera -
none of them really work well in showing the pictures; some of them
want to detect my camera when all I want is to view my photos
(thumbnails and full size) from /mnt/camera.

Anyone would recommend any decent program to do this? Thanks.
  


I have been using qiv for years. The pics look high quality and can be 
resized to fit your screen, and it is pretty fast too.




Re: setting up a noiseless workstation

2008-02-02 Thread Clint Pachl

Zbigniew Baniewski wrote:

On Fri, Feb 01, 2008 at 08:16:49PM +0200, Imre Oolberg wrote:

  

As an operating system my first choice would OpenBSD and second is Linux.
In fact at the moment i run such a kind of setup using Linux but i feel
need to upgrade my hardware, i have old 700 MHz Celeron, 19" monitor
(1024x768) and 100MBit/s network.

I would be very thankful if somebody could share their experience about 
putting together such a kind of computer or what do you recommend.



You can use old Pentium II 400 MHz - there are still many of them available,
which doesn't need any cooler, its radiator will do. Such way the only
moving part would be PS-fan, which you can slow down a little, using
a resistor 50-100 Ohm - additionally reducing a noise.

"Full" Pentium II with 400 MHz clock will give you in practice about as much
power, as that Celeron 700 (a little less, but not that much).
  


I have this setup exactly. I put a resistor on the fan in the PS and the 
machine is virtually inaudible. And the last time I checked, it consumes 
less than 20W. It has 64MB RAM, a DVI graphics card and an em NIC that 
is connected via a cross-over cable to my main server in the next room, 
which I cannot hear. The 400MHz machine boots an extremely minimal 
FreeBSD system via PXE, runs X, and connects to the main server via XDM. 
400MHz for this machine is over-kill actually. I have used an old P166 
that works just as well, but for some reason my DVI card doesn't work in it.


Because of the way X operates, all the applications run run on my main 
server. The main server is s a dual P3 1GHz with 2GB RAM and a 4 SCSI 
disk RAID0 running OpenBSD. I have been using this setup for almost 3 
years now.