spamd in combination with multiple mail hosts

2005-08-12 Thread Rogier Krieger
After deploying spamd as a shield for a non-OpenBSD mail host, I wonder how to expand this setup to support multiple mailhosts (say three mx'es mxN). I couldn't find much on Google. Although the man pages on spamd and friends are excellent in getting spamd to work, I did not find hints to build a

Re: spamd in combination with multiple mail hosts

2005-08-13 Thread Rogier Krieger
On 8/12/05, Rogier Krieger [EMAIL PROTECTED] wrote: After deploying spamd as a shield for a non-OpenBSD mail host, I wonder how to expand this setup to support multiple mailhosts (say three mx'es mxN). Although it may be bad form to reply to oneself, any thoughts on how complicated it would

Re: CARP packets

2005-08-16 Thread Rogier Krieger
On 8/15/05, Luiz Otavio Souza [EMAIL PROTECTED] wrote: Why CARP not send packets with physical CARP interface address ? Unfortunately, I do not really understand the question and/or what you're trying to accomplish. Should anyone think I'm derailing, please bring a clue-by-four. Unless I'm

Re: How to patch a physically weak system recommended use of sudo?

2005-08-20 Thread Rogier Krieger
On 8/20/05, viq [EMAIL PROTECTED] wrote: Actually, I had to log in as root a few times, to build some of the ports. Well, maybe not _HAD_ to, but i didn't really know how to otherwise allow user to use more RAM just for the build. How about using the -c option to sudo(8)? It allows you to

Re: Boot hanging following power out

2005-08-20 Thread Rogier Krieger
On 8/20/05, Gary Clemans-Gibbon [EMAIL PROTECTED] wrote: /dev/rwd1a: UNEXPECTED INCONSISTENCY; RUN fsck_ffs MANUALLY. Can't open /dev/rwd1a: Device not configured CAN'T CHECK FILE SYSTEM. You seem to have a hardware problem. Are you sure the system *detects* your data drive? The dmesg from

Re: Boot hanging following power out - SOLVED

2005-08-20 Thread Rogier Krieger
On 8/20/05, Gary Clemans-Gibbon [EMAIL PROTECTED] wrote: I'm wondering if I could have fed a command to the boot prompt that would have NOT mounted the two data drives. Yes, which is one of the times single user mode proves its usefullness. You'll want to check boot(8) for more information,

Re: 3.8 beta requests

2005-08-23 Thread Rogier Krieger
On 8/23/05, Theo de Raadt [EMAIL PROTECTED] wrote: This release will bring a lot of new ideas from us. One of them in particular is somewhat risky. First off: I like the idea. The technical merit is obvious. I have a question regarding the timing, though. Is there a particular reason to go

Re: 3.8 beta requests

2005-08-23 Thread Rogier Krieger
On 8/23/05, Theo de Raadt [EMAIL PROTECTED] wrote: These changes have been worked on for almost 3 years now. And they went in right after the tree unlocked after 3.7. Thanks for setting me straight. It only means that, at least for my systems, the transition has been pretty painless so far.

Re: How to configure bind to work under OpenBSD 3.7

2005-08-25 Thread Rogier Krieger
On 8/25/05, Joco Salvatti [EMAIL PROTECTED] wrote: I'd like to know where I could find informations about how to configure bind to work under OpenBSD 3.7. Setting up BIND is well documented. See the files in /usr/share/doc. You'll find the Bind ARM (in HTML format) there. Also, see the man

Re: Disable/Passprotect single user mode

2005-08-27 Thread Rogier Krieger
On 8/27/05, JSD [EMAIL PROTECTED] wrote: I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. This is hardly unique to OpenBSD. How about placing your devices in a securely

Re: Trouble with IPSeccmd XP client and Openbsd server (3.7 generic) (long, too much information given)

2005-09-04 Thread Rogier Krieger
On 9/3/05, Ben [EMAIL PROTECTED] wrote: I've gone over my policy, conf, and batch files with a fine tooth comb, and can't see what the problem could be (Aside from the fact that I'm using XP): Personally, I encountered the same problem with no proposal being chosen. Still, retrying to get my

Re: mount_null gone?

2005-09-04 Thread Rogier Krieger
On 9/4/05, Gijs Nijholt [EMAIL PROTECTED] wrote: Why is it gone and what is the alternative? Various messages such as [1] detail why it was removed some time ago as it didn't work well enough. You'll want to read the rest of the thread for more details. Using localhost NFS mounts may provide

Re: sendmail and clamd

2005-09-06 Thread Rogier Krieger
On 9/6/05, Cristian Del Carlo [EMAIL PROTECTED] wrote: What can i use to connect sendmail and clamd? Perhaps, if only for hints, you may want to take a look at MailDroid that came across the list some time ago. It connects the in-base sendmail to clamav through smtp-vilter from ports. You'll

Re: CVSWeb

2005-09-10 Thread Rogier Krieger
On 9/10/05, Rico [EMAIL PROTECTED] wrote: After following all the steps I get the error: Internal Server Error Typically, your httpd error logs will provide you with the best place to look for fixing the problem. Usually, it's something simple; in case of files not being found, you're missing

FYI - OpenSSH key sizes (from NetBSD's tech-security list)

2005-09-15 Thread Rogier Krieger
Saw the following item in a thread on the netbsd-tech-security list [1]. The text below deals with 1024 bit RSA keys being/becoming practicable to crack (in about a year) as discussed in a talk at MIT earlier. Glad that 3.8 also includes 2048 bit keys as a default [2]. I copied the talk

Re: SATA cards (not looking for RAID)

2005-09-21 Thread Rogier Krieger
On 9/21/05, Johan P. Lindstrvm [EMAIL PROTECTED] wrote: I'm on the lookout for SATA cards. I am not interested in RAID (or the lack there of in the SATA controllers) for this assembly. So far, Silicon Image SiI 3112 and 3114 model controllers seem to work fine for me. In the Netherlands, they

Re: pkg_create error

2005-09-22 Thread Rogier Krieger
On 9/22/05, Edy Purnomo [EMAIL PROTECTED] wrote: i'm not sure that i can do that smoothly. the server is our firewall and it's running : Use a quiet window on your network to down the machine. Add a new boot drive to the system and install the latest release or -current snapshot. Transfer items

Re: Time limited internet connection

2005-09-24 Thread Rogier Krieger
On 9/24/05, Kiraly Zoltan [EMAIL PROTECTED] wrote: I want to drop her Internet connection at night (11:00AM) because the child don't go to sleep. It would seem your problem is primarily one of parenting and not so much a technical one. Still, cron(8) and various self-made scripts may prove

Re: 3Ware Escalade 8006-2LP hardware SATA RAID-1 controller

2005-09-26 Thread Rogier Krieger
On 9/26/05, Steven R. Gerber [EMAIL PROTECTED] wrote: I'm looking for new SUPPORTED RAID controllers. You may want to look into the LSI MegaRAID cards, such as the 150-4 and 150-6 SATA controllers (not the 150-2). Running the upcoming 3.8 will get you built-in RAID management support.

Re: netstart and trunk interfaces in 3.8

2005-10-04 Thread Rogier Krieger
On 10/4/05, Ryan Puckett [EMAIL PROTECTED] wrote: When using 3com NICs (aka xl's) in a trunk, the trunk interface will not be defined after a system reboot. Wouldn't a hostname.if(5) entry to ensure readyness of the physical interfaces suffice? For VLAN interfaces, I usually add the following

It ain't quick, but it's sure fun

2005-10-07 Thread Rogier Krieger
We recently deployed a new fileserver:) Most surprising thing was that it recognised a 250 GByte HDD at the first go, without real effort. Giving up on the BIOS built-in LANdesk 0.99 PXEboot was a little harder, but the machine is a wee bit beyond its supported life cycle. For those interested;

Re: It ain't quick, but it's sure fun

2005-10-07 Thread Rogier Krieger
On 10/7/05, Nick Holland [EMAIL PROTECTED] wrote: Rogier Krieger wrote: Somehow, I expected you'd reply :) Giving up on the BIOS built-in LANdesk 0.99 PXEboot was a little harder, but the machine is a wee bit beyond its supported life cycle. If that's on the fxp card/chip, you might

Re: Multi boot question XP and Openbsd after installation

2005-10-09 Thread Rogier Krieger
On 10/9/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I have installed Openbsd on my computer. The manual says now for multi-booting with XP you must do dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 Please don't type commands on the console that you don't understand beforehand. You will want

Re: pxeboot halting...

2005-10-22 Thread Rogier Krieger
On 10/23/05, poncenby smythe [EMAIL PROTECTED] wrote: option root-path /tftpboot; IIRC, this isn't what pxeboot(8) advises you to do. Why are you entering a root path to be found at what seems to be a TFTP location? Specifying a root disc location would seem to be more

Re: DISKLESS tutorial that need feedback

2005-10-23 Thread Rogier Krieger
On 10/23/05, Bachman Kharazmi [EMAIL PROTECTED] wrote: And about keeping them synced, master.passwd is the most important thing for keeping the 'accounts' intact. You may want to look into the yp(8) subsystem. For the enviroment you describe, this may be what you're looking for to keep many

Re: root on raidframe

2005-10-23 Thread Rogier Krieger
On 10/23/05, Ken Gunderson [EMAIL PROTECTED] wrote: Now my question is whether there is some way to shorten this delay that I'm missing? Did you read through the list archives? This matter is well-discussed. Other OS'es, such as NetBSD, use a different way for the checking of parity (i.e. in

Re: Email problems

2005-10-23 Thread Rogier Krieger
On 10/23/05, Monah Baki [EMAIL PROTECTED] wrote: Until 4 days ago, I no longer receive email on my server. I thought it was my provider (cox) since they block inbound and outbound smtp. In the first case, you're out of luck unless you find an external party that can relay your e-mail to you

Re: openssh in other products

2005-10-25 Thread Rogier Krieger
On 10/25/05, frantisek holop [EMAIL PROTECTED] wrote: is openssh public domain? Considering the text on the OpenSSH homepage that mentions OpenSSH being freely useable and re-useable by everyone under a BSD license [1], I'd say it isn't in the public domain. Of course, the LICENSE file [2]

Re: OpenBSD 3.8 and Panasonic Toughbook CF-72

2005-10-28 Thread Rogier Krieger
On 10/28/05, Jared Solomon [EMAIL PROTECTED] wrote: What is the installer detecting post fdc0 that I can disable to allow it to boot and install (and then I can post a dmesg!) Perhaps booting with a verbose output provides you with more information on the culprit. boot -c UKC verbose Also,

Re: OpenBSD 3.8 and Panasonic Toughbook CF-72

2005-10-28 Thread Rogier Krieger
On 10/28/05, Jared Solomon [EMAIL PROTECTED] wrote: Roger, thanks for the tip, enabling verbose helped me fix it. It has come through for me on several occasions when some hardware component was messing things up. Typically, I check with another BSD flavour or a Knoppix CD in case of problems at

Re: dhclient woes

2005-10-30 Thread Rogier Krieger
This is more a me too than a solution, I'm afraid. On 10/31/05, Hannah Schroeter [EMAIL PROTECTED] wrote: If I include an alias directive in /etc/dhclient.conf, dhclient exits after having acquired a lease, the syslog messages are like this: This is quite similar to something I also

Re: CARP

2005-11-02 Thread Rogier Krieger
On 11/2/05, Gustavo Rios [EMAIL PROTECTED] wrote: Would this approach requires any special support into the switch device? CARP does not require special support, I suppose. Rather, it requires a more feature-rich switch not blocking its traffic (multicast). In other words: if you don't disable

Re: CARP

2005-11-02 Thread Rogier Krieger
On 11/2/05, Dag Richards [EMAIL PROTECTED] wrote: Though without redundant switches you have your new single point of failure is the switches. Which, in many cases, already was a single point of failure. Keeping a few spare, low-grade switches at least allows you to get things back up quickly

Re: LSI MegaRAID 320-1

2005-11-07 Thread Rogier Krieger
On 11/7/05, Per-Olov Sjvholm [EMAIL PROTECTED] wrote: The compat list is not always that clear. How many people know that the LSI Logic 150-4 and 150-6 MegaRAID cards are actually known as the compatible card LSI/Symbios 523 SATA? Probably, those that read the misc@ archives or those who

GSSAPI logins into OpenSSH combined with auto-obtaining AFS tokens

2007-07-10 Thread Rogier Krieger
Dear list, While fiddling around to move my home directories onto AFS, I notice a bit of interesting behaviour. At a first glance, everything seems just fine. When logging in through the Krb5 mechanism (as defined in login.conf), OpenSSH nicely obtains an AFS token for me. Use case: Windows SSH

Re: GSSAPI logins into OpenSSH combined with auto-obtaining AFS tokens

2007-07-10 Thread Rogier Krieger
As someone kind made me realise in an off-list reply, I should have included my sshd_config on the machine in question. I should further note that it is a 3.9-stable machine (although I did not spot changes relating to the OpenSSH behaviour regarding GSSAPI for the versions included with

Re: GSSAPI logins into OpenSSH combined with auto-obtaining AFS tokens

2007-07-11 Thread Rogier Krieger
On 7/10/07, Rogier Krieger [EMAIL PROTECTED] wrote: If my clients (MIT KfW, SecureCRT) attempt GSSAPI authentication, [...] OpenSSH does not obtain any AFS token, forcing me to run afslog manually. Or put such a command in /etc/ssh/sshrc, as hinted at in sshd(8). This seems to work

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Rogier Krieger
On 10/23/07, Boris Goldberg [EMAIL PROTECTED] wrote: You don't really need ntpd on all systems. One (timeserver) runs ntpd, and others use rdate, called from cron (once a day is usually enough). While your suggestion would work, it would also entail more work without adding benefit. Upon

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Rogier Krieger
On 10/23/07, Chris Kuethe [EMAIL PROTECTED] wrote: Rdate provides a single valuable service: the ability to poll a device to see what time it thinks it is (ie. probing the health of my time servers). Good point; I should probably add that to my monitoring setup. Thanks for the suggestion,

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Rogier Krieger
On 10/23/07, Boris Goldberg [EMAIL PROTECTED] wrote: It's always better to don't run a demon if you don't have to. :) That sort of remark has often started endless debates. :) For me, trusting rdate to provide time or using ntpd for it is pretty much the same, but feel free to disagree. There

Re: 4 NIC problem

2005-05-01 Thread Rogier Krieger
On 5/1/05, Monah Baki [EMAIL PROTECTED] wrote: I decided to add another interface xl1. All of a sudden I get the following error: Are you sure that the correct cable leads to the correct interface? OpenBSD may very well detect the cards in an order different from what you expect. In other

Re: [ DHCP ] must reboot to works.

2005-05-03 Thread Rogier Krieger
On 5/3/05, Eric LeBlanc [EMAIL PROTECTED] wrote: In fact, whey the problem arise, I lost the connection to the internet. So, I stopped my dhcpcd client, and restarted it. I hope you mean dhclient(8) and not dhcpd(8). The latter probably won't help you much. The output of dhclient should tell

Re: some questions about OpenBSDs future plans

2005-05-09 Thread Rogier Krieger
On 5/9/05, Rogier Krieger [EMAIL PROTECTED] wrote: Currently, OpenBSD includes XFree86 4.4.0. That is, includes an unencumbered X. See the FAQ (#1) on this. Cheers, Rogier -- If you don't know where you're going, any road will get you there.

Re: problem booting amd64 w/ 3.6

2005-05-11 Thread Rogier Krieger
On 5/11/05, Toni Mueller [EMAIL PROTECTED] wrote: It crashes after most of dmesg with this error message: uvm_fault(0x80890500, 0x1, 0, 1) - e fatal page fault in supervisor mode trap type 6 code 0 rip 802003fc cs8 rflags 10297 cr2 1 cpl7 rsp 808bbdb8

Re: OpenBSD 3.6, Intel 3.0 HT processor!!

2005-05-12 Thread Rogier Krieger
On 5/12/05, Joco Salvatti [EMAIL PROTECTED] wrote: Hi all, I have a Server box running OpenBSD 3.6, Intel 3.0 HT processor, I've compiled a kernel with SMP support, but where can I verify if it's really using SMP? You will want to try GENERIC.MP for an SMP-enabled kernel: it's named /bsd.mp.

PF TCP Synproxy on -current (was: Re: PF TCP Synproxy)

2005-05-20 Thread Rogier Krieger
On 5/20/05, Adam Papai [EMAIL PROTECTED] wrote: I have a problem with pf synproxy. To add to the other report on pf's synproxy fules, this may be another instance of the same problem. Running -current (built this morning, but my -current of 2 days ago suffered the same problem), it seems I

Re: mounting ext3fs via ext2fs

2005-05-29 Thread Rogier Krieger
On 5/29/05, Haluk Durmus [EMAIL PROTECTED] wrote: It is a 80gig extern harddisk connected with usb2.0 to my laptop. It has an ext3fs and is full of data. I thought,that I could mount it with ext2fs, but it was not posible... Feel free to correct me if I'm wrong, but as far as I know, ext3fs

Re: OpenBSD VPN

2005-06-01 Thread Rogier Krieger
On 6/1/05, Bruce Marriner [EMAIL PROTECTED] wrote: It seems the OpenBSD documentation is blank (due to no support). There's plenty of documentation available: vpn(8). The man pages are quite worthwhile. If you really want to see the old FAQ on IPsec, try Antioffline [1]. What makes you say VPN

Re: pf versus ppp for address translation...

2005-06-05 Thread Rogier Krieger
On 6/5/05, poncenby [EMAIL PROTECTED] wrote: [...] however in the process of writing my ppp.conf I noticed ppp can do the whole NAT thing itself. Thanks for the learning moment: I hadn't known of that option until reading your message. Therefore, feel free to take my words with a grain of salt

Re: kernel: page trap fault

2005-06-09 Thread Rogier Krieger
On 6/9/05, Uwe Dippel [EMAIL PROTECTED] wrote: Sorry, I have no clue how to debug, so I can only put one of those messages here and ask for guidance: Upon a panic, the system tells you to not even think about reporting problems without a 'ps' and a 'trace'. It does so in capitals. See

Re: 3.7 3.5 Install from CD won't boot in laptop

2005-06-11 Thread Rogier Krieger
On 6/12/05, Z L [EMAIL PROTECTED] wrote: The bootloader get stuck at pckbc0 ISA Q Port 0x60/5 everytime. A standard method (which is in FAQ #5, if I recall correctly) is to disable devices that cause trouble using the UKC (User Kernel Config). Try boot_config(8) for more info. That said, this is

Re: CCD on /

2005-06-16 Thread Rogier Krieger
On 6/16/05, Niall O'Higgins [EMAIL PROTECTED] wrote: Controllers don't tend to like it. Sometimes with disk failure, the controller will fail too! Apart from that, you'll suffer from various annoying delays if for any reason parts in the system try to access the failed drive. Admittedly, I only

Re: Encrypted Swap

2005-06-20 Thread Rogier Krieger
On 6/20/05, Ray Percival [EMAIL PROTECTED] wrote: Setting up GPG and I thought I enabled encrypted swap with sysctl -w vm.swapencrypt.enable=1 You're already there; only GPG doesn't know about that. I suspect you misread the instructions. GPG will whine about insecure memory so long as it does

Re: time offset of bios clock different from Utc?

2005-06-23 Thread Rogier Krieger
On 6/24/05, Hanspeter Roth [EMAIL PROTECTED] wrote: how can one set the time offset of the bios clock different from UTC? You obviously haven't searched the archives Please do so before posting; it'll save you from getting flamed. Your question is rather old (so you'll get an old RTFA, dating

Re: OT - network design documents

2005-06-25 Thread Rogier Krieger
On 6/25/05, Steve Williams [EMAIL PROTECTED] wrote: We narrowed it down by putting a static route on the Windows PC and it worked flawlessly. I DO NOT want to try maintaining static routes on 150+ PC's of various flavors... How about distributing static routes through DHCP? It's listed in

Re: OT - network design documents

2005-06-25 Thread Rogier Krieger
Don't thank me just yet. I should've checked my notes. On 6/25/05, Steve Williams [EMAIL PROTECTED] wrote: How about distributing static routes through DHCP? It's listed in dhcp-options(5) as option static-routes. OMG! What a simple solution! It's so simple it never occured to me.

Re: nforce3 problem

2005-06-27 Thread Rogier Krieger
On 6/27/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: [...] are there other lurking problems with this board that I should be aware of that may make replacing the whole board a better choice? If you ask me, forget about nVidia until they clean up their act and supply developers with

Re: LDAP Support

2005-06-27 Thread Rogier Krieger
On 6/27/05, Matt Juszczak [EMAIL PROTECTED] wrote: Is it possible to integrate LDAP into the system so that all authentication is done via LDAP? You may want to check out login_ldap from ports (sysutils/login_ldap) which uses BSD auth present in OpenBSD. See how you like it and give it a test

Re: nforce3 problem

2005-06-28 Thread Rogier Krieger
On 6/28/05, Steffen Kluge [EMAIL PROTECTED] wrote: On Tue, 2005-06-28 at 00:52 +0200, Rogier Krieger wrote: Why limit your options? Well, it's about *not* limiting options. And this one is a particularly attractive option (from the hardware price/performance point of view). True

Re: Honesty needed...

2005-06-28 Thread Rogier Krieger
On 6/28/05, Matt Juszczak [EMAIL PROTECTED] wrote: My boss really wants to run SMP. He [...] thinks that a single 3 ghz with 4 gb RAM couldn't handle our mail server [...] To avoid making CLM's, you should realise these lists are archived indefinitely. If things are crashing twice a day and

Re: Suggested hardware for server?

2005-06-29 Thread Rogier Krieger
On 6/29/05, Matt Garman [EMAIL PROTECTED] wrote: I would *like* to do SCSI, but when you look at the cost/GB ratio, there's just no comparison [...] In defence of SCSI (and of the people buying it), there's more than a cost/GByte ratio. Reliability and performance are some of the things that

Re: secure ftpd upload for specific file restricted by type?

2005-06-29 Thread Rogier Krieger
On 6/29/05, Daniel Ouellet [EMAIL PROTECTED] wrote: Jonathan Franks wrote: [...] what about having them use something like Filezilla? I didn't try it, no. If I read Jonathan's post correctly, he mentioned FileZilla as a client-side tool. It's a way of allowing you to use the regular ftpd

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Rogier Krieger
On 6/30/05, Nico Meijer [EMAIL PROTECTED] wrote: Be careful not to lock yourself out... Nico To that end, I normally use a table with addresses I usually connect from in combination with a pass-quick rule before any blocking rules for SSH connections. Using rsync for synchronising those table

Re: load kernel module!!

2005-06-30 Thread Rogier Krieger
On 6/30/05, Joco Salvatti [EMAIL PROTECTED] wrote: But suddenly I find out that I need the kernfs support. What should I do to load this as a kernel module? Why are you making it so hard on yourself? The instructions to recompile a kernel are listed in the FAQ. If you're going another way than

Re: em0 and SMP problem 3.7 SMP DMESG and ifconfig

2005-07-03 Thread Rogier Krieger
On 7/2/05, Micha3 Koc [EMAIL PROTECTED] wrote: OpenBSD 3.7-stable (STORAGE.MP) #1: Sat Jul 2 21:29:32 CEST 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/STORAGE.MP That sounds like bad news: a custom kernel. If you cannot reproduce the problem with GENERIC[.MP], you're on your own.

Re: em0 and SMP problem 3.7 SMP DMESG and ifconfig

2005-07-03 Thread Rogier Krieger
On 7/3/05, Bruno Delbono [EMAIL PROTECTED] wrote: Just because some happens to use a different kernel doesn't automatically mean that they do not know anything. Follow this thread and see why the OP did what he did. Typically, people do not need to run anything other than GENERIC. Unless I'm

Re: httpd - 3.6-3.7

2005-07-04 Thread Rogier Krieger
On 7/4/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I would be happy if somebody could tell me what exactly changed because I didn't realy touched the configuration-file and added just the Include for the vhost and enabled it. Your config files are still your prime suspect, I'd say. Using

Re: ami0: timeout with LSI SATA 150-4 Controller

2005-07-05 Thread Rogier Krieger
On 7/5/05, Martmn [EMAIL PROTECTED] wrote: I'm trying to configure an OpenBSD 3.7 box with a LSI SATA 150-4 RAID Card, but I'm having problems with timeout errors. snip Jul 4 21:31:54 backup /bsd: ami0: timeout ccb 119 Not to deny you're having problems, but according to the CVS logs [1], the

Re: raidctl -P all in /etc/rc

2005-07-07 Thread Rogier Krieger
On 7/7/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I want ask, what will occur if not do raidctl -P all in /etc/rc, but set it in /etc/rc.local, after daemons started? What can fsck with such uncleaned/unreconstructed RAID? To be blunt: if you don't want to spend the money on hardware

Re: Abort trap after untar'ing src.tar.gz and sys.tar.gz

2005-07-08 Thread Rogier Krieger
On 7/8/05, Stuart Henderson [EMAIL PROTECTED] wrote: Can I suggest someone applies this to the www tree?: Your good intentions notwithstanding, pointing people to the sane habit of checking archives before extracting them may be just as useful. tar tvzf src.tar.gz Alternatively, extracting

Re: hw.setperf not available

2005-07-10 Thread Rogier Krieger
On 7/10/05, bossk [EMAIL PROTECTED] wrote: [...] it's a common cpu type and it's not supported? That's bad. The hw.setperf sysctl is for CPUs that support running at various speeds through mechanisms such as Intel's SpeedStep (such as the Pentium M). I wonder whether AMD's Cool 'n Quiet feature

Re: hw.setperf not available

2005-07-11 Thread Rogier Krieger
On 7/11/05, bossk [EMAIL PROTECTED] wrote: The Pentium 3 mobile supports Intel's SpeedStep and the Ultra-Low-Voltage-Version supports the Enhanced Intel SpeedStep Technology. Thanks for telling me something new; I didn't know the Intel made those chips. My apologies for the confusion. My

Removing PCMCIA ath0 causes panic

2005-07-11 Thread Rogier Krieger
After upgrading my laptop do 3.7, I figured to give my Atheros wireless NIC a go. The card works, albeit only in 11b mode. While maybe not optimal, that is not really an issue. Besides, that would be a different thread. It seems I'm not allowed to unplug the card from the PCMCIA slot. Doing so

Re: Removing PCMCIA ath0 causes panic

2005-07-11 Thread Rogier Krieger
On 7/11/05, Michael Shalayeff [EMAIL PROTECTED] wrote: Making, drinking tea and reading an opus magnum from Rogier Krieger: It seems I'm not allowed to unplug the card from the PCMCIA slot. Doing so instantly provides a kernel panic. it might have been already fixed in -current post-may

Re: Removing PCMCIA ath0 causes panic

2005-07-11 Thread Rogier Krieger
On 7/11/05, Rogier Krieger [EMAIL PROTECTED] wrote: On 7/11/05, Michael Shalayeff [EMAIL PROTECTED] wrote: Making, drinking tea and reading an opus magnum from Rogier Krieger: It seems I'm not allowed to unplug the card from the PCMCIA slot. Doing so instantly provides a kernel panic

Re: To secure WiFi networks

2005-07-16 Thread Rogier Krieger
On 7/16/05, Johan P. Lindstrvm [EMAIL PROTECTED] wrote: The scenario I am thinking of is when you run a public WiFi access point at let's say a campus with many new visitors from different organisations [...] If you're dealing with visitors from various organisations, you may want to

Re: A domain question for a private network

2005-07-18 Thread Rogier Krieger
On 7/17/05, Kevin [EMAIL PROTECTED] wrote: P.S. Skip the reverse DNS part unless you really need it. That part can cause more headaches than it will likely ever be worth in a smallish network like the one you describe. Preparing for a reverse lookup is rather simple; there are plenty of

Re: The MD5-File at the Server... (Request for RMD160 and SHA1 Checksums)

2005-07-24 Thread Rogier Krieger
On 7/24/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: MD5 isn't realy that secure and so I would like to have a rmd160 and sha1 Checksum-file to ensure that I downloaded original stuff. Changing the algorithm (or adding another, for that matter) will not provide greater proof of authenticity.

Re: carp0: incorrect hash

2005-07-24 Thread Rogier Krieger
On 7/24/05, stan [EMAIL PROTECTED] wrote: I'm building a firewall pair, and I'm getting this error message on both machines of the pair. carp0 is the external interface. Where should I start looking for this? Possible hardware troubles notwithstanding, you'll want to be positive that the

Re: Device not configured (APM, sound, modem)

2005-08-04 Thread Rogier Krieger
On 8/4/05, Z L [EMAIL PROTECTED] wrote: I installed OBSD3.7 on my laptop. Things that are not working are: sound and modem (dial-up internal laptop modem) and apm. Apart from providing the *complete* dmesg output already requested by someone else, you will also want to check the notes on the

Re: Cannot boot version 3.8 on HP pavilion 422

2005-11-10 Thread Rogier Krieger
On 11/10/05, Lionel Vidal [EMAIL PROTECTED] wrote: Sorry to not give the whole log of messages, but I cannot copy them except by writing them fast on paper. I could get some specific part if required though. Try attaching a serial console. See the FAQ [1] for more details. You will want to add

Re: group ownership of /var/mail

2005-11-27 Thread Rogier Krieger
On 11/27/05, J Moore [EMAIL PROTECTED] wrote: On Sun, Nov 27, 2005 at 01:16:27AM -0600, the unit calling itself Matthew Weigel wrote: snip You should probably look to http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d first. Yep - I looked at it first... but IIRC it doesn't support POP

Re: ruby on rails derailed, chroot httpd reported DOA

2005-12-18 Thread Rogier Krieger
On 12/18/05, Michael Steinfeld [EMAIL PROTECTED] wrote: any ideas? You're probably dealing with FAQ item #10.16: dealing with Apache's chroot() http://www.openbsd.org/faq/faq10.html#httpdchroot /var/www/users/mike/rails/public/dispatch.fcgi (pid 9195), chdir() failed: No such file or

Re: dhcpd: Multiple interfaces match the same shared network

2006-01-08 Thread Rogier Krieger
On 1/9/06, Alexander Farber [EMAIL PROTECTED] wrote: What's actually meant by shared network and why is it bad (is it somehow related to broadcasts?). The ifconfig shows my cards being on 2 different networks: As mentioned in dhcpd.conf(5), a shared network is a set of (logical) networks that

Re: bibd 9.3 dnssec-makekeyset missing?

2006-01-10 Thread Rogier Krieger
On 1/10/06, Chris [EMAIL PROTECTED] wrote: but dnssec-makekeyset dont seem to exist in my system. I m doing something wrong or it is not possible to allow dynamic updates with SIG in openbsd. I think with BIND 9 is possible. You may want to look into dnssec-keygen(8). It can also generate the

Re: Banking with OpenBSD

2006-01-12 Thread Rogier Krieger
On 1/12/06, Craig Skinner [EMAIL PROTECTED] wrote: On Thu, Jan 12, 2006 at 11:19:54AM +0100, Otto Moerbeek wrote: Austin was asking for a euro zone bank. Last time I looked, the UK was on a map of Europe. Many UK banks are multi-currency. According to the EC regulation 2560/2001,

Re: AMD64 Hardware.

2006-01-12 Thread Rogier Krieger
On 1/12/06, RV Tec [EMAIL PROTECTED] wrote: Tyan. The S2880, mentioned by Peereboom has been replaced by S2882. Does anyone know if this is still supported? The S2882 and S2882-D work like a charm for me. Both in UP and MP modes. Dmesg for the S2882-D is below (also sent to dmesg@). Where it

Re: ssh to computer with variable ip address

2006-01-15 Thread Rogier Krieger
On 1/15/06, Dave Feustel [EMAIL PROTECTED] wrote: How can ssh be used to connect to a computer with a (variable) dhcp-assigned ip address, given that the ip address can change at any time? Your problem is not with SSH. Although I cannot say whether your situation will allow for it, try

Re: Temperature

2006-01-15 Thread Rogier Krieger
On 1/15/06, Pete Vickers [EMAIL PROTECTED] wrote: While we're on this subject, what about adding something like sysctl -w | grep hw.sensor to /etc/daily ? I'd consider the output of such to be as useful as the status of disk space etc. If you're concerned about temperature readings and fan

Re: Problem with alias on xl0

2006-01-21 Thread Rogier Krieger
On 1/21/06, Greg Thomas [EMAIL PROTECTED] wrote: If I'm out of my mind please let me know. It is working but I can always use my last resort of buying a USB cable and plugging it into my OpenBSD box or I can put my wireless/parallel If you have the spare PCI slot available, you could also add

Re: kernel debugging when booted off install cd

2006-02-02 Thread Rogier Krieger
On 2/3/06, Charles Sprickman [EMAIL PROTECTED] wrote: It either freezes or panics when probing (or creating?) rd0, which I assume is the ramdisk used in the install. It runs 3.3 fine. Perhaps you need to look at the FAQ if you're running i386: upgrading/reinstalling OpenBSD/i386 using

Re: QUESTION ABOUT PPP.LINKUP AND PF

2006-02-09 Thread Rogier Krieger
On 2/9/06, Brian Shackelford [EMAIL PROTECTED] wrote: ! sh -c pfctl -e -f /etc/pf.conf You could use the (ppp0) syntax and enable pf by default instead. That way, it will deal with the address as it is present on the ppp0 interface. At the same time, it will keep the rest of your networks

Re: Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread Rogier Krieger
On 3/23/07, carlopmart [EMAIL PROTECTED] wrote: Do I need to open additional ports or protocols?? Not so much additional ports or protocols, but are you sure you enabled X11 forwarding? A few suggestions for things to check: + in /etc/ssh/sshd_config, did you enable 'X11Forwarding' ? + for

Re: Problems with X11 traffic over ssh in pf.conf

2007-03-23 Thread Rogier Krieger
On 3/23/07, carlopmart [EMAIL PROTECTED] wrote: My problem is wih pf rules. If I put on pf.conf pass all, all works ok. Then the easiest debugging feature is doing a tcpdump on pflog0 for blocked packets. Assuming (without your pf.conf, it's hard to guess) you use a default block, add a log

Re: bcw(4) is gone

2007-04-05 Thread Rogier Krieger
On 4/6/07, Andris Delfino [EMAIL PROTECTED] wrote: What's wrong? They protect their license. Period. No one seems to dispute the right of copyright holders to protect their licence. That said, there are more ways than one to protect one's licence. It hardly seems unreasonable to privately

Re: Problem: Raid mounting root as read-only, and not from the partition desired...

2007-04-07 Thread Rogier Krieger
On 4/7/07, Merp.com Volunteer [EMAIL PROTECTED] wrote: I used the directions from eclectica here: http://www.eclectica.ca/howto/openbsd-software-raid-howto.php To be blunt: you are using old (3.7) instructions that are not from the OpenBSD project, that involve compiling your own kernel (see

FFS panic on 4.0-release and fsck_ffs troubles (SATA drive on SiI3112)

2007-05-08 Thread Rogier Krieger
On an older piece of hardware (PII-300) running 4.0-release running local storage at my parents', I experience FFS-related panics when writing files to the secondary HDD [wd1] (connected to a separate SATA controller [pciide1]). Since I lacked a console cable, I copied the trace and ps

Re: pf.conf settings

2007-05-29 Thread Rogier Krieger
On 5/28/07, Woodchuck [EMAIL PROTECTED] wrote: I wonder if this setup will allow you to do dhcp. Probably during boot, (before it takes effect, when the rules in /etc/rc are active), but afterwards, not. Typically, dhclient(8) uses the bpf(4) devices and is not troubled by PF's ruleset. If

Re: spamd

2007-06-04 Thread Rogier Krieger
On 6/4/07, Edgars Makra [EMAIL PROTECTED] wrote: With one such non passable smtp server admin we tested it via phone. He said that promt is very slow (as it should be), then he got 451 Temp error. After 5, 15, 30 and 60 minutes he retried, nothing :( If you tried connecting by manually

mpi(4) supporting bio(4)/bioctl(8)?

2008-04-17 Thread Rogier Krieger
also support bioctl? If not, I know what sort of equipment to avoid on a bunch of new servers. Thanks in advance, Rogier Krieger References: 1. NYCBSDCon 2006 - Marco Peereboom - Bio and Sensors in OpenBSD http://www.openbsd.org/papers/bio.pdf 2. OpenBSD CVSweb - /src/sys/dev/ic/mpi.c (rev. 1.92

  1   2   3   >