Re: How to set up sendmail

2009-10-25 Thread Richard Toohey

On 25/10/2009, at 5:44 PM, Mark Yieh wrote:

Hi I'm trying to set up sendmail as my home mail server but it's my  
first time so I'm not sure what to do.
I know it's already installed and enabled in base but will only  
accept requests from local host.
So I've added this flag in rc.conf.local to enable it it receive  
external connections:


sendmail_flags=-L sm-mta -bd -q30m

And I've also changed my router settings to forward all packets  
from port 587 to my openbsd box.

And I've restarted the computer.
But I still can't set up an account on my Macintosh to access the  
openbsd mail server.
What am I doing wrong? And does sendmail use the IMAP or POP  
protocol? I prefer to use IMAP if possible.



[cut]

sendmail uses SMTP.  popa3d is in base for POP3.  I haven't got as  
far as IMAP yet.


Wikipedia and the manuals a good place to start!

Running an external-facing mail server might not be a good idea
until you've got a lot more of the concepts under your belt!

HTH.



Re: make release fails on sgi

2009-10-25 Thread Maurice Janssen

Miod Vallat wrote:

Maurice Janssen wrote:

Hi,

I'm trying to build the file sets for 4.6-stable on an O2 machine, but it 
keeps failing with the following error:




In file included from mips64/cpu.h:358,
 from machine/cpu.h:5,
 from mips64/param.h:44,
 from machine/param.h:42,
 from ../../../../sys/param.h:95,
 from ../../../../altq/altq_subr.c:30:
../../../../sys/sched.h:110: error: bit-field `spc_qs' width not an 
integer constant

*** Error code 1

Stop in /usr/src/sys/arch/sgi/compile/GENERIC-IP27 (line 92 of 
/usr/share/mk/sys.mk).

*** Error code 1

Stop in /usr/src/etc (line 12 of etc.sgi/Makefile.inc).


Just had a similar error during building xenocara file sets:

In file included from /usr/xenocara/xserver/include/miscstruct.h:53,
 from /usr/xenocara/xserver/include/regionstr.h:53,
 from /usr/xenocara/xserver/include/region.h:51,
 from /usr/xenocara/xserver/include/window.h:52,
 from /usr/xenocara/xserver/include/input.h:55,
 from /usr/xenocara/xserver/include/inputstr.h:52,
 from /usr/xenocara/xserver/Xi/selectev.c:60:
/usr/X11R6/include/pixman-1/pixman.h:149: error: bit-field `p1' width not 
an integer constant

*** Error code 1

Stop in /usr/xenocara/kdrive/obj/Xi (line 821 of Makefile).


Can this be caused by flaky hardware?


Maybe, but then this could be an unexpected compiler configuration
change.

Do you have an /etc/mk.conf file specifying fancy compiler options?

You might want to look at the files causing compilation problems
(sys/sched.h, xenocara/lib/pixman/pixman/pixman.h) and compare them to
fresh 4.6 files as well.

Or it could be that either /usr/include/machine/_types.h or
/usr/include/sys/_types.h has been modified or replaced, and definitions
of types such as int32_t are missing.


The source tree is a clean checkout and there is no /etc/mk.conf.
I moved the hard disk to a different machine and both make build and 
make release finished without a hitch.  So it seems the first O2 does 
have some hardware problem.
The machine is building X now, I have good hopes it will finish this as 
well.


Maurice



Votre compte en ligne

2009-10-25 Thread Caisse Desjardins
Une situation nous oblige ` bloquer temporairement l'acchs ` vos solutions en 
ligne.

Pour continuer ` utiliser nos services en lignes vous devez mettre ` jours les 
paramjtres de
sicuriter dans votre compte AcchsD avant le : 25/10/2009 .

Veuillez cliquer sur le lien ci-dessous pour riactiver votre compte en ligne :

http://services-en-ligne.myvnc.com/accesd/accesd.desjardins.com/

Nous espirons remidier ` la situation rapidement et vous remercions de votre 
comprihension



Re: How to set up sendmail

2009-10-25 Thread Ivo van der Sangen
On Sat, Oct 24, 2009 at 09:44:07PM -0700, Mark Yieh wrote:
 Hi I'm trying to set up sendmail as my home mail server but it's my  
 first time so I'm not sure what to do.
 I know it's already installed and enabled in base but will only accept  
 requests from local host.
 So I've added this flag in rc.conf.local to enable it it receive  
 external connections:
 
 sendmail_flags=-L sm-mta -bd -q30m
 
 And I've also changed my router settings to forward all packets from  
 port 587 to my openbsd box.
 And I've restarted the computer.
 But I still can't set up an account on my Macintosh to access the  
 openbsd mail server.
 What am I doing wrong? And does sendmail use the IMAP or POP protocol?  
 I prefer to use IMAP if possible.
 
 The name of my machine is zeus.my.domain and my ip is 24.6.209.32.
 I don't have a domain name so I just use my ip.
 
 On my Macintosh I've used these settings to try to create the new  
 account.
 Email Address: m...@24.6.209.32
 Incoming Mail Server: zeus.24.6.209.32
 
 Here's the error message that I got from trying to set up that account  
 on my Macintosh.
 
 The IMAP server zeus.24.6.209.32 is not responding.
 Try checking the network connection, and that the server name is  
 correct.
 Otherwise, the server might be temporarily unavailable. If you  
 continue, you might not be
 able to receive messages.
 
 
 Do I have to add a user account to my mail server? or do I  
 automatically have an account if I'm a user on the OpenBSD system?
 
 Thanks everyone... especially the OpenBSD Team for the best OS in the  
 world.
 

Hi Mark,

You will be in for quite an adventure. Sendmail is only one part of a
fully fledged mail system. What sendmail does in OpenBSD is accept
connections and deliver mail to the local mailbox or relay the mail
to be delivered by another mail server.

If you want to configure an IMAP mailbox for example I would use
dovecot. Now, what else you need is dependent on your needs. So can
you explain to me what you want to be able to do with your mail
system? Feel free to send me a personal message if you need more help
during configuration.

I run a mail system on OpenBSD, which lets me send mail from anywhere
in the world and read my mail from anywhere and it handles all mail
destined to my domain, all in a secure fashion. Software I use to
accomplish this is sendmail, cyrus-sasl, dovecot, procmail, fetchmail.
You might want to read up on those.

Regards,

Ivo van der Sangen



Route Shows Unexpected Behaviour?

2009-10-25 Thread Insan Praja
Hi Misc@
on i386 current I got these..

$ route -nv get 202.90.abc.de
so_dst: inet 202.90.abc.de; so_ifp: link ; RTM_GET: Report Metrics:
len 124, priority 0, table 0, pid: 0, seq 1, errno 0
flags:UP,GATEWAY,HOST,STATIC
locks:  inits:
sockaddrs: DST,IFP
 202.90.abc.de link#0
   route to: 202.90.abc.de
destination: 202.90.abc.de
  interface: lo0
 if address: 202.90.abc.de
   priority: 4 (connected)
  flags: UP,HOST,DONE,LLINFO,CLONED
 use   mtuexpire
 415 0 0

locks:  inits:
sockaddrs: DST,GATEWAY,IFP,IFA
 202.90.abc.de 00:07:e9:0f:44:37 lo0 202.90.abc.de

Netstat:
$ netstat -nr | grep 202.90.abc.de
202.90.abc.de 00:07:e9:0f:44:37  UHLc   0  415 - 4 lo0

Actually:
$ ifconfig vlan2
vlan2: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:07:e9:0f:44:37
description: DISTRIB_IF
priority: 0
vlan: 2 priority: 0 parent interface: em1
groups: vlan
inet6 fe80::207:e9ff:fe0f:4437%vlan2 prefixlen 64 scopeid 0xb
inet 202.90.abc.de netmask 0xffe0 broadcast 202.90.abc.def


Please enlighten me,

TIA


Insan Praja


OpenBSD 4.6-current (GENERIC.MP) #4: Mon Oct 19 20:29:14 WIT 2009

r...@netcorerouter.mygreenlinks.net:/usr/src/sys/arch/i386/compile/GENERIC.MP
RTC BIOS diagnostic error efixed_disk,invalid_time
cpu0: Intel(R) Xeon(R) CPU E3110 @ 3.00GHz (GenuineIntel 686-class) 3 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,CX16,xTPR
real mem  = 2143834112 (2044MB)
avail mem = 2068721664 (1972MB)
RTC BIOS diagnostic error efixed_disk,invalid_time
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 12/12/07, SMBIOS rev. 2.5 @
0x7fdfd000 (63 entries)
bios0: vendor Intel Corporation version
S3200X38.86B.00.00.0045.082820081329 date 08/28/2008
bios0: Intel Corporation S3210SH
acpi0 at bios0: rev 2
acpi0: tables DSDT SLIC FACP APIC WDDT MCFG HPET SPCR SSDT SSDT SSDT
SSDT SSDT HEST BERT ERST EINJ DMAR
acpi0: wakeup devices SLPB(S5) NPE1(S5) NPE6(S5) P32_(S5) PS2M(S1)
PS2K(S1) ILAN(S5) PEX0(S5) PEX1(S5) PEX2(S5) PEX3(S5) PEX4(S5)
PEX5(S5) UHC1(S1) UHC2(S1) UHC3(S1) UHC4(S1) EHCI(S1) EHC2(S1)
UH42(S1) UHC5(S1) UHC6(S1) AZAL(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 332MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3110 @ 3.00GHz (GenuineIntel 686-class) 3 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,CX16,xTPR
ioapic0 at mainbus0: apid 5 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 5
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (NPE1)
acpiprt2 at acpi0: bus -1 (NPE6)
acpiprt3 at acpi0: bus 3 (P32_)
acpiprt4 at acpi0: bus 1 (PEX0)
acpiprt5 at acpi0: bus -1 (PEX1)
acpiprt6 at acpi0: bus -1 (PEX2)
acpiprt7 at acpi0: bus -1 (PEX3)
acpiprt8 at acpi0: bus 2 (PEX4)
acpiprt9 at acpi0: bus -1 (PEX5)
acpicpu0 at acpi0: PSS
acpicpu1 at acpi0: PSS
acpibtn0 at acpi0: SLPB
acpibtn1 at acpi0: PWRB
bios0: ROM list: 0xc/0x8000 0xc8000/0x1000 0xc9000/0x1800 0xca800/0x1000
ipmi at mainbus0 not configured
cpu0: Enhanced SpeedStep 2993 MHz: speeds: 3000, 2000 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 3200/3210 Host rev 0x00
em0 at pci0 dev 25 function 0 Intel ICH9 IGP AMT rev 0x02: apic 5
int 20 (irq 11), address 00:15:17:8d:4c:c5
uhci0 at pci0 dev 26 function 0 Intel 82801I USB rev 0x02: apic 5
int 18 (irq 9)
uhci1 at pci0 dev 26 function 1 Intel 82801I USB rev 0x02: apic 5
int 21 (irq 10)
ehci0 at pci0 dev 26 function 7 Intel 82801I USB rev 0x02: apic 5
int 17 (irq 10)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb0 at pci0 dev 28 function 0 Intel 82801I PCIE rev 0x02: apic 5
int 17 (irq 11)
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 4 Intel 82801I PCIE rev 0x02: apic 5
int 17 (irq 11)
pci2 at ppb1 bus 2
vga1 at pci2 dev 0 function 0 Matrox MGA G200e (ServerEngines) rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
uhci2 at pci0 dev 29 function 0 Intel 82801I USB rev 0x02: apic 5
int 23 (irq 11)
uhci3 at pci0 dev 29 function 1 Intel 82801I USB rev 0x02: apic 5
int 19 (irq 11)
uhci4 at pci0 dev 29 function 2 Intel 82801I USB rev 0x02: apic 5
int 18 (irq 9)
ehci1 at pci0 dev 29 function 7 Intel 82801I USB rev 0x02: apic 5
int 23 (irq 11)
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb2 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0x92
pci3 at ppb2 bus 3
em1 at pci3 dev 0 function 0 Intel PRO/1000MT (82540EM) rev 0x02:

Re: How to set up sendmail

2009-10-25 Thread L. V. Lammert
On Sat, 24 Oct 2009, Mark Yieh wrote:

 Hi I'm trying to set up sendmail as my home mail server but it's my
 first time so I'm not sure what to do.
 I know it's already installed and enabled in base but will only accept
 requests from local host.
 So I've added this flag in rc.conf.local to enable it it receive
 external connections:

Webmin makes it pretty simple, ..

Lee



Re: How to set up sendmail

2009-10-25 Thread Tomáš Bodžár
You can get some idea and tips from this material
http://www.kernel-panic.it/openbsd/mail/

On Sun, Oct 25, 2009 at 1:52 PM, Ivo van der Sangen i...@freethought.nl wrote:
 On Sat, Oct 24, 2009 at 09:44:07PM -0700, Mark Yieh wrote:
 Hi I'm trying to set up sendmail as my home mail server but it's my
 first time so I'm not sure what to do.
 I know it's already installed and enabled in base but will only accept
 requests from local host.
 So I've added this flag in rc.conf.local to enable it it receive
 external connections:

 sendmail_flags=-L sm-mta -bd -q30m

 And I've also changed my router settings to forward all packets from
 port 587 to my openbsd box.
 And I've restarted the computer.
 But I still can't set up an account on my Macintosh to access the
 openbsd mail server.
 What am I doing wrong? And does sendmail use the IMAP or POP protocol?
 I prefer to use IMAP if possible.

 The name of my machine is zeus.my.domain and my ip is 24.6.209.32.
 I don't have a domain name so I just use my ip.

 On my Macintosh I've used these settings to try to create the new
 account.
 Email Address: m...@24.6.209.32
 Incoming Mail Server: zeus.24.6.209.32

 Here's the error message that I got from trying to set up that account
 on my Macintosh.

 The IMAP server zeus.24.6.209.32 is not responding.
 Try checking the network connection, and that the server name is
 correct.
 Otherwise, the server might be temporarily unavailable. If you
 continue, you might not be
 able to receive messages.


 Do I have to add a user account to my mail server? or do I
 automatically have an account if I'm a user on the OpenBSD system?

 Thanks everyone... especially the OpenBSD Team for the best OS in the
 world.


 Hi Mark,

 You will be in for quite an adventure. Sendmail is only one part of a
 fully fledged mail system. What sendmail does in OpenBSD is accept
 connections and deliver mail to the local mailbox or relay the mail
 to be delivered by another mail server.

 If you want to configure an IMAP mailbox for example I would use
 dovecot. Now, what else you need is dependent on your needs. So can
 you explain to me what you want to be able to do with your mail
 system? Feel free to send me a personal message if you need more help
 during configuration.

 I run a mail system on OpenBSD, which lets me send mail from anywhere
 in the world and read my mail from anywhere and it handles all mail
 destined to my domain, all in a secure fashion. Software I use to
 accomplish this is sendmail, cyrus-sasl, dovecot, procmail, fetchmail.
 You might want to read up on those.

 Regards,

 Ivo van der Sangen





-- 
http://www.openbsd.org/lyrics.html



smtpd: format for certificates

2009-10-25 Thread Rene Maroufi
Hi,

I try out the new smtpd in 4.6 stable. I want to use tls, but i don't
know in which format the certificate file must be. I have a private key,
and a public key in 2 files, but opensmtpd wants a certificate in one
file. I tried to concatenate both in one file, but smtpd -n says:
/etc/mail/smtpd.conf:9: cannot load certificate: fxp0

What is the correct format for the certificate?

Regards
Reni
-- 
Reni Maroufi
i...@maroufi.net



Re: smtpd: format for certificates

2009-10-25 Thread Gilles Chehade

Rene Maroufi wrote:

Hi,

I try out the new smtpd in 4.6 stable. I want to use tls, but i don't
know in which format the certificate file must be. I have a private key,
and a public key in 2 files, but opensmtpd wants a certificate in one
file. I tried to concatenate both in one file, but smtpd -n says:
/etc/mail/smtpd.conf:9: cannot load certificate: fxp0

What is the correct format for the certificate?

Regards
Reni
  

you should read man starttls, it provides the exact description of how
you setup ssl/tls in smtpd

Gilles



Re: smtpd: format for certificates

2009-10-25 Thread Rene Maroufi
On Sun, Oct 25, 2009 at 03:41:22PM +0100, Gilles Chehade wrote:
   
 you should read man starttls, it provides the exact description of how
 you setup ssl/tls in smtpd

Not really. I tried the procedure in man starttls and ended with 2 file,
too. If I use the mycert.pem from the steps in man starttls (as file
fxp0.crt) i get the same error with smtpd -n:
/etc/mail/smtpd.conf:9: cannot load certificate: fxp0

Regards
Rene
-- 
Reni Maroufi
i...@maroufi.net



Re: smtpd: format for certificates

2009-10-25 Thread Jason McIntyre
On Sun, Oct 25, 2009 at 05:07:30PM +0100, Rene Maroufi wrote:
 On Sun, Oct 25, 2009 at 03:41:22PM +0100, Gilles Chehade wrote:

  you should read man starttls, it provides the exact description of how
  you setup ssl/tls in smtpd
 
 Not really. I tried the procedure in man starttls and ended with 2 file,
 too. If I use the mycert.pem from the steps in man starttls (as file
 fxp0.crt) i get the same error with smtpd -n:
 /etc/mail/smtpd.conf:9: cannot load certificate: fxp0
 

smtpd.conf(5) currently has a simple example for using an rsa
certificate (which we should probably change). you can use the info in
that page and starttls(8) to do the same using a dsa certificate.

jmc



Re: smtpd: format for certificates

2009-10-25 Thread Rene Maroufi
On Sun, Oct 25, 2009 at 04:17:46PM +0001, Jason McIntyre wrote:
 
 smtpd.conf(5) currently has a simple example for using an rsa
 certificate (which we should probably change). you can use the info in
 that page and starttls(8) to do the same using a dsa certificate.

Thanks, this example from the new (current) manpage works. In the 4.6
Release manpage for smtpd.conf wasn't a example like this.

Regards
Reni
-- 
Reni Maroufi
i...@maroufi.net



smtpd: feature like the transport table in postfix

2009-10-25 Thread Rene Maroufi
Hi,

OpenSMTPD is great. Really simple configuration syntax. But I missed one
thing from postfix: Would it be possible to do MX lookups in a relay via
statement? I mean: Postfix have the transport table feature. I use this
feature to relay some maildomains to their really mailhub instead of my
smarthost. 90 % of my mails go to the smarthost, but i have some
exceptions. In smtpd.conf I try this:

accept from $mynetwork for example.org relay via mail.example.org
accept from $mynetwork for all relay via $smarthost tls enable auth

But a transport table entry in postfix can do mx lookups:

example.org smtp:example.org
example.net smtp:[mail.example.net]

first entry is with MX lookup, second without.

Would it be possible to implement a switch for the relay statement for
with/without MX lookup, for example:

accept from $mynetwork for domain example.org relay via mail.example.org
accept from $mynetwork for domain example.net relay via mx:example.net

First form for without MX lookup, second with MX lookup.

Regards
Rene
-- 
Reni Maroufi
i...@maroufi.net



switching console from com0 back to console

2009-10-25 Thread Abdullah Sendul
Hi,

I am trying to remove the boot messages printed during the boot phase.

as a workaround:

I added in
/etc/boot.conf

set tty com0


which brought the desired output, that when the server boots, it does
not print any information to the console.

now i would like to print some output to the console :)

so my question is:

1- is there another way to stop the system printing messages to the console
2- is it possible to revert the output back to console from com0

at the end on the boot message I would like to print that the system is ready.

thanks for your replies.

\sendul



Re: smtpd: feature like the transport table in postfix

2009-10-25 Thread Gilles Chehade
On Sun, Oct 25, 2009 at 06:28:33PM +0100, Rene Maroufi wrote:
 Hi,
 
 OpenSMTPD is great. Really simple configuration syntax. But I missed one
 thing from postfix: Would it be possible to do MX lookups in a relay via
 statement? I mean: Postfix have the transport table feature. I use this
 feature to relay some maildomains to their really mailhub instead of my
 smarthost. 90 % of my mails go to the smarthost, but i have some
 exceptions. In smtpd.conf I try this:
 
 accept from $mynetwork for example.org relay via mail.example.org
 accept from $mynetwork for all relay via $smarthost tls enable auth
 
 But a transport table entry in postfix can do mx lookups:
 
 example.org smtp:example.org
 example.net smtp:[mail.example.net]
 
 first entry is with MX lookup, second without.
 
 Would it be possible to implement a switch for the relay statement for
 with/without MX lookup, for example:
 
 accept from $mynetwork for domain example.org relay via mail.example.org
 accept from $mynetwork for domain example.net relay via mx:example.net
 
 First form for without MX lookup, second with MX lookup.
 
 Regards
 Rene

Hi,

Isn't the following what you're trying to do ?

accept from $mynetwork for domain example.org relay via mail.example.org
accept from $mynetwork for domain example.net relay

Gilles

-- 
Gilles Chehade
freelance developer/sysadmin/consultant

   http://www.poolp.org



Re: smtpd: feature like the transport table in postfix

2009-10-25 Thread Rene Maroufi
On Sun, Oct 25, 2009 at 09:00:51PM +0100, Gilles Chehade wrote:
 
 Hi,
 
 Isn't the following what you're trying to do ?
 
 accept from $mynetwork for domain example.org relay via mail.example.org
 accept from $mynetwork for domain example.net relay

Oh, yes, sometimes I'm blind. You are right of course. Maybe my brain is
postfix conditioned to think to complex. OpenSMTPD has a really simple
configuration syntax, maybe to simple for me :-)

Regards
Rene
-- 
Reni Maroufi
i...@maroufi.net



Re: switching console from com0 back to console

2009-10-25 Thread Alexander Hall
Abdullah Sendul wrote:
 Hi,
 
 I am trying to remove the boot messages printed during the boot phase.

Why? Seriously. To not confuse your grandmother?

 as a workaround:
 
 I added in
 /etc/boot.conf
 
 set tty com0
 
 
 which brought the desired output, that when the server boots, it does
 not print any information to the console.

Yes it does.

 now i would like to print some output to the console :)

cat  /dev/console.

Note however that your console is the com port.

 so my question is:
 
 1- is there another way to stop the system printing messages to the console
 2- is it possible to revert the output back to console from com0
 
 at the end on the boot message I would like to print that the system is ready.

I suspect what you really mean is that you want to output stuff to the
_screen_. Try writing it to /dev/ttyC0, as in

# echo -- System is ready --\r  /dev/ttyC0

I bet it will do what you want.

/Alexander



Re: smtpd: feature like the transport table in postfix

2009-10-25 Thread Denis Fondras

Hi Rene,

Perhaps I didn't understand correctly your problem but can't you just use :
accept from $mynetwork for domain example.net relay ?

and let smtpd resolve example.net MX ?

Denis



decreasing the size of the distribution

2009-10-25 Thread Abdullah Sendul
Hi,

we are having a couple of openbsd servers, of which, the content is static.

I would like to identify all the files needed for this system to run,
and then move it to a flash disk to minimise the size of the
distribution

find -mtime -atime is giving me some ideas, but is this the right
approach to remove the rest of the files not used on the system.

what do you suggest?

thanks

\sendul



Re: decreasing the size of the distribution

2009-10-25 Thread Robert
On Mon, 26 Oct 2009 00:10:20 +0100
Abdullah Sendul coffeesm...@gmail.com wrote:

 Hi,
 
 we are having a couple of openbsd servers, of which, the content is
 static.
 
 I would like to identify all the files needed for this system to run,
 and then move it to a flash disk to minimise the size of the
 distribution
 
 find -mtime -atime is giving me some ideas, but is this the right
 approach to remove the rest of the files not used on the system.
 
 what do you suggest?
 
 thanks
 
 \sendul


I'd suggest spending the additional ~$2 for the 1GB flash and not to
mess with anything!

Yes, i didn't touch your question how to find those files.
Yes, i don't know why you would have to slim down, because you didn't
write why you would have to do that.

- Robert



Re: decreasing the size of the distribution

2009-10-25 Thread Jason Dixon
On Mon, Oct 26, 2009 at 12:10:20AM +0100, Abdullah Sendul wrote:
 Hi,
 
 we are having a couple of openbsd servers, of which, the content is static.
 
 I would like to identify all the files needed for this system to run,
 and then move it to a flash disk to minimise the size of the
 distribution
 
 find -mtime -atime is giving me some ideas, but is this the right
 approach to remove the rest of the files not used on the system.
 
 what do you suggest?

If you have to ask, you shouldn't be doing it.  Why would you possibly
need to get smaller than the baseXX, etcXX and manXX sets?  These easily
fit on a few hundered MB.  What modern flash disk won't fit this?

Seriously, stop overthinking it.  If you primary goal is to use flash
(not necessarily to remove files), look at something like flashrd.

-- 
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net/



Re: decreasing the size of the distribution

2009-10-25 Thread STeve Andre'
On Sunday 25 October 2009 19:10:20 Abdullah Sendul wrote:
 Hi,
 
 we are having a couple of openbsd servers, of which, the content is static.
 
 I would like to identify all the files needed for this system to run,
 and then move it to a flash disk to minimise the size of the
 distribution
 
 find -mtime -atime is giving me some ideas, but is this the right
 approach to remove the rest of the files not used on the system.
 
 what do you suggest?
 
 thanks
 
 \sendul

You could remove the games I suppose (/usr/games) and save probably
less than 2M--2 Meg--of space.

Man pages are popular to remove, as are entries in /sys for other
arches than your own.  But I've been pestered at least four times
now, by people trying to save space that shot themselves by this
and broke things--and didn't know how to fix it.

All of OpenBSD fits into a very small partition.  Are you saying
that you really don't have a flash drive (or whatever) of a gig 
in size?  Of course I don't know what you want to do with the
system once its runing, but the more complex it is, the smaller
OpenBSD is going to be in comparison to that.

Lastly if you do build a little shrip frankensystem, asking for
help here isn't going to get a lot of sympathy.  You'll be on
your own.

--STeve Andre'



PKG_PATH never works as stated

2009-10-25 Thread Juan Miscaro
I've had this problem for a long time (over many OpenBSD releases).

The pkg_add man page (for 4.5) states:

If a given package name cannot be found, the directories named by
PKG_PATH are searched.  It should contain a series
of entries separated by colons.  Each entry consists of a directory
name.  URL schemes such as FTP, HTTP, HTTPS, or SCP are also
appropriate.

On a client machine:

PKG_PATH=http://$HTTP_MASTER/:http://$HTTP_MASTER/by_port/i386/all/

My master server serves up normal packages and those packages compiled
from ports.

When I do this only the first component is searched.  I have to do a
second package update run with PKG_PATH pointing directly to the
second component for the ports packages to be seen.

Why is this?

-- 
/jm



Re: PKG_PATH never works as stated

2009-10-25 Thread Jacob Meuser
On Sun, Oct 25, 2009 at 10:29:29PM -0400, Juan Miscaro wrote:
 I've had this problem for a long time (over many OpenBSD releases).
 
 The pkg_add man page (for 4.5) states:
 
 If a given package name cannot be found, the directories named by
   ^^^
 PKG_PATH are searched.  It should contain a series
 of entries separated by colons.  Each entry consists of a directory
 name.  URL schemes such as FTP, HTTP, HTTPS, or SCP are also
 appropriate.
 
 On a client machine:
 
 PKG_PATH=http://$HTTP_MASTER/:http://$HTTP_MASTER/by_port/i386/all/
 
 My master server serves up normal packages and those packages compiled
 from ports.
 
 When I do this only the first component is searched.  I have to do a
 second package update run with PKG_PATH pointing directly to the
 ^^
 second component for the ports packages to be seen.
 
 Why is this?

did you give pkg_add a package name?

-- 
jake...@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org



Re: smtpd: format for certificates

2009-10-25 Thread Hugo Villeneuve
On Sun, Oct 25, 2009 at 04:17:46PM +0001, Jason McIntyre wrote:
 On Sun, Oct 25, 2009 at 05:07:30PM +0100, Rene Maroufi wrote:
  On Sun, Oct 25, 2009 at 03:41:22PM +0100, Gilles Chehade wrote:
 
   you should read man starttls, it provides the exact description of how
   you setup ssl/tls in smtpd
  
  Not really. I tried the procedure in man starttls and ended with 2 file,
  too. If I use the mycert.pem from the steps in man starttls (as file
  fxp0.crt) i get the same error with smtpd -n:
  /etc/mail/smtpd.conf:9: cannot load certificate: fxp0
  
 
 smtpd.conf(5) currently has a simple example for using an rsa
 certificate (which we should probably change). you can use the info in
 that page and starttls(8) to do the same using a dsa certificate.
 
 jmc

Silly question, but are Microsoft's products and openssl finaly
compatible when using DSA suites?

I was never able to make them interact succesfully and it was just
easier to always use RSA certs to make it work. Although that might
just show how bad an admin I am.


-- 
Hugo Villeneuve h...@eintr.net
http://EINTR.net/