Re: httpd location statement

2020-12-10 Thread Alexey Vatchenko
> On 11 Dec 2020, at 00:16, Todd C. Miller  wrote:
> 
> On Thu, 10 Dec 2020 19:24:20 +0200, Alexey Vatchenko wrote:
> 
>> I’m migrating from ancient server with OpenBSD’s apache1 to 6.8 OpenBSD’s htt
>> pd.
>> In my configuration I use Handler for .html, .htm, .css, .js and 4 more exten
>> sions.
>> I’ve found a way to configure it for one extension and it works great!
>> 
>> location “*.html” {
>>fastcgi {
>>socket “/run/slowcgi.sock”
>>param SCRIPT_FILENAME “/path/to/handler.pl"
>>}
>> }
> 
> Can't you just use lua-style patterns with "location match ..."?
> See the CAPTURES section in pattern(7) for details.

Sorry, still don’t understand how captures can help in this case.
In my understanding, it lacks "OR” to avoid duplicating identical location 
blocks.

location “*.html|*.css|*.js” {

}

instead of

location “*.html” {
}
location “*.css” {
}
location “*.js” {
}

Could you please give an example of using captures for this case?



Re: httpd location statement

2020-12-10 Thread Alexey Vatchenko
> On 10 Dec 2020, at 20:51, Florian Obser  wrote:
> 
> I think the only way is to repeat the location statement for each extension :/

If preparing a patch, what is the preferable syntax for this functionality?

location regex “/.*\.(html|css){1}$” {
# something
}



httpd location statement

2020-12-10 Thread Alexey Vatchenko
Hello!

I’m migrating from ancient server with OpenBSD’s apache1 to 6.8 OpenBSD’s httpd.
In my configuration I use Handler for .html, .htm, .css, .js and 4 more 
extensions.
I’ve found a way to configure it for one extension and it works great!

location “*.html” {
fastcgi {
socket “/run/slowcgi.sock”
param SCRIPT_FILENAME “/path/to/handler.pl"
}
}

And I havn't found a way to specify multiple extensions.

Any advice how to do it?

Thanks in advance!



Re: Mount HDD USB on 6.0 Stable: Fail

2016-11-16 Thread Alexey Vatchenko
>From my attach script:
/usr/local/libexec/hotplug-diskmount attach -u av -g av -m 750 -r dirty -F
"$DEVNAME"

As a result:
/dev/sd2i on /vol/TransMemory type ntfs (local, nodev, nosuid, read-only)

With FUSE,
/usr/local/libexec/hotplug-diskmount attach -u av -g av -m 750 -r dirty
"$DEVNAME"

And the result:
fusefs on /vol/EDGE type fuse (local)

On Tue, Nov 15, 2016 at 9:15 AM, Stephane HUC "CIOTBSD" <
b...@stephane-huc.net> wrote:

>
> $ /usr/local/libexec/hotplug-diskmount attach -u $USER -m 0700 -F 3AS


Try the following way:

$ doas   /usr/local/libexec/hotplug-diskmount attach -u zou -m 0700 -F sd1

where zou - your login name (as i understand from your letter) and sd1 -
currently attached device.



Re: Mount HDD USB on 6.0 Stable: Fail

2016-11-14 Thread Alexey Vatchenko
Unfortunately, from time to time FUSE hangs my system. So I have to use -F
to disable FUSE.



Re: pfstatd crash?

2008-03-26 Thread Alexey Vatchenko
2008-03-26, clifford bailey [EMAIL PROTECTED] wrote:
 I've just come across some strange behaviour on pfstatd on openbsd 4.2. 
 If I run nmap against pfstatd, pfstatd stops. Is this expected behaviour 
 or a known bug? It seems a bit weak to me for software that should be 
 running on a firewall. To reproduce it try a straight nmap scan of the 
 open pfstatd port.

Can it be that your userland is not the same version as your kernel?

-- 
Alexey Vatchenko
http://www.bsdua.org



Re: ssh or sudo echoing password

2008-03-22 Thread Alexey Vatchenko
2008-03-22, Lars Noodin [EMAIL PROTECTED] wrote:
 When I use ssh to run sudo on a remote host, the password for sudo gets
 echoed to the screen.  e.g.

   # ssh -l kodos 10.101.101.01 sudo ls /
   [EMAIL PROTECTED]'s password:
   Password:0hNoesICit


For such things use `ssh -t`

-- 
Alexey Vatchenko
http://www.bsdua.org



Re: ipsec help needed

2008-03-15 Thread Alexey Vatchenko
I have the same setup at home and i didn't dig to deep in ipsec things
but implemented it in the following way:
 - created gif tunnel.
 - in ike esp transport proto ipencap rule i specified exact IPs (physical
   address of gif tunnel).
 - set default route to tunnel's peer.
I believe it's possible to make it using just IPSEC, but have no time to play
with it :(

-- 
Alexey Vatchenko
http://www.bsdua.org



Re: Would a crypto-accelerators help WEP on Soekris?

2008-03-02 Thread Alexey Vatchenko
On 2008-03-02, Andre Pierre [EMAIL PROTECTED] wrote:
 One quick (silly) question.
 Under OpenBSD 4.2 would such a card improve WEP performance, or is that 
 handled entirely by the wireless ath0 (mini-pci) card?

 It makes sense that a crypto-accelerator would help if the Soekris were 
 a VPN endpoint, but for WEP I think it probably is entirely useless, right?

WEP is entirely useless :) Actually, it depends on what you want to achieve.
Anyway, according to `main ath`, ath supports hardware WEP.

-- 
Alexey Vatchenko
http://www.bsdua.org



Re: IPSec tunnel problem

2008-03-01 Thread Alexey Vatchenko

Markus Wernig wrote:

It's because of:
ike passive esp from 192.168.0.0/24 to any local egress dstid
[EMAIL PROTECTED] psk xxx


Yes, it's because of that. But I'm convinced that you don't need that at
all.
 From what I understand, you just need to give access from some remote
network(s) to your office net. Please correct me if you are trying to
achieve something else.


No, i'm trying to connect HOME_GATEWAY to office network. I don't want 
to connect home network to office network.



Again (see last post):

Home gateway:
ike dynamic esp from HOME_NET to 192.168.0.0/24 peer OFFICE_EXTERNAL_IP
psk xxx

Office gateway:
ike passive esp from HOME_NET to 192.168.0.0/24 psk xxx
(if you have more than one external networks, you can put any instead
of HOME_NET or repeat the stanza for each network.)


Are you sure that the rule for office gateway is correct? I think you 
mean from 192.168.0.0/24 to HOME_NET. And if i put any instead of 
network addresses i will get that same issue: all outgoing traffic will 
flow through my home gateway.


--
Alexey Vatchenko
http://www.bsdua.org



Re: IPSec tunnel problem (solved)

2008-03-01 Thread Alexey Vatchenko

Office gateway:
# cat /etc/ipsec.conf
ike passive esp from 192.168.0.0/24 to any local egress dstid 
[EMAIL PROTECTED] psk xxx


Home gateway:
# cat /etc/ipsec.conf
ike dynamic esp from egress to 192.168.0.0/24 peer OFFICE_GATEWAY srcid 
[EMAIL PROTECTED] psk xxx


So, if on home gateway i specify from any to 192.168.0.0/24, office 
gateway creates flow:

flow esp in from 0.0.0.0/0 to 192.168.0.0/24 ...

But if i use from egress to 192.168.0.0/24 then all works as expected:
flow esp in from HOME_GATEWAY to 192.168.0.0/24 ...

So, making changes in home gateway configuration i can influence on how 
traffic goes in office network! I think it's not desired behavior. 
Anyway, thanks to all for the help!


--
Alexey Vatchenko
http://www.bsdua.org



Re: VPN suggestions and advise for clean sheet setup

2008-02-29 Thread Alexey Vatchenko
On 2008-02-29, Daniel Ouellet [EMAIL PROTECTED] wrote:
 Three needs, providing access to remote Window users, browser, etc.

 And if possible in some cases providing specific network access via VPN 
 (tunnel, or what not) to remote office.

 Last, would be to provide streaming access via a secure gateway like 
 proxy or the like to traveling users.

 The solutions for each one could be different, but using the same setup, 
 or part of it anyway would obviously be better.

 There is so many different choices and ways to do this now, witch one 
 would you recommend if today you could start with a clean sheet and not 
 have to be stuck with legacy setup?

For my Windows users i setup OpenVPN in server mode. No problem at all for
roaming users, the same crypto algorithms for Windows and for UNIX. User
just starts .bat file and gets VPN.
I think IPSec is not so good for Windows users because of limitation of crypto:
3des, sha1. It's not so hard to setup, but also i faced problem if office
network is located behind NAT. Also i didn't find thing similar to srcid on
Windows side.

As long as i use OpenBSD at home i'm trying to setup IPSec tunnel for myself.
But still don't resolv a problem :)
(http://marc.info/?l=openbsd-miscm=120378201209896w=2)

-- 
Alexey Vatchenko
http://www.bsdua.org



Re: IPSec tunnel problem

2008-02-29 Thread Alexey Vatchenko

Hi!

Thanks for reply!

Markus Wernig wrote:
 From my point of view the problem is that you use the same network 
range 192.168.0/24  in your home and office. Off the top of my head I'd 
say that this should not work. The routing entries look a bit scary, 
actually. If I had the same setup, I'd try one of the following:

- change the home network to something else than 192.168.0/24


No, i don't use same network address for two networks.

Actually, the problem is here (take a look at flow esp out):

office-gw$ sudo ipsecctl -s all
FLOWS:
flow esp in from 0.0.0.0/0 to 192.168.0.0/24 peer HOME_GATEWAY srcid
OFFICE_GATEWAY/32 dstid [EMAIL PROTECTED] type use
flow esp out from 192.168.0.0/24 to 0.0.0.0/0 peer HOME_GATEWAY srcid
OFFICE_GATEWAY/32 dstid [EMAIL PROTECTED] type require
flow esp in from 192.168.0.0/24 to 192.168.0.0/24 type bypass
flow esp out from 192.168.0.0/24 to 192.168.0.0/24 type bypass

SAD:
esp tunnel from HOME_GATEWAY to OFFICE_GATEWAY spi 0x5d3e6f12 auth
hmac-sha2-256 enc aes
esp tunnel from OFFICE_GATEWAY to HOME_GATEWAY spi 0x7072ca39 auth
hmac-sha2-256 enc aes

It's because of:
ike passive esp from 192.168.0.0/24 to any local egress dstid
[EMAIL PROTECTED] psk xxx

To any! But what should i use if i don't know peer's address?
How ike rule should be specified to create flow with peer's address
instead of 0.0.0.0/0?

--
Alexey Vatchenko
http://www.bsdua.org



Re: IPSec tunnel problem

2008-02-28 Thread Alexey Vatchenko

Hi!

Jeff Quast wrote:

you need to declare a bypass flow on the side of the network where the router, 
presumably on 192.168.0.0/24 requires communication to the local network 
segment also on 192.168.0.0/24. It is probobly trying to send this across the 
tunneled wire, which won't reach its destination.
Create a bypass for flows from 192.168 to 192.168, like so:

flow esp from 192.168.0.0/24 to 192.168.0.0/24 type bypass


Coming to the office this morning i found out that all office's outgoing 
traffic goes through my home gateway. It looks like IPSec created 
default route for hosts in local network.


From the `netstat -rn`

Encap:
Source Port  DestinationPort  Proto 
SA(Address/Proto/Type/Direction)
default0 192.168.0/24   0 0 
77.109.17.213/esp/use/in
192.168.0/24   0 default0 0 
77.109.17.213/esp/require/out

192.168.0/24   0 192.168.0/24   0 0 none/esp/bypass/in
192.168.0/24   0 192.168.0/24   0 0 none/esp/bypass/out

Config file of the office's gateway:
flow esp from 192.168.0.0/24 to 192.168.0.0/24 type bypass
ike passive esp from 192.168.0.0/24 to any dstid [EMAIL PROTECTED] psk xxx

As i understand, the problem is in ``any'' keyword in second line. But 
what it should be if peers IP is dynamic?


--
Alexey Vatchenko
http://www.bsdua.org



Re: IPSec tunnel problem

2008-02-27 Thread Alexey Vatchenko

Jeff Quast wrote:

you need to declare a bypass flow on the side of the network where the router, 
presumably on 192.168.0.0/24 requires communication to the local network 
segment also on 192.168.0.0/24. It is probobly trying to send this across the 
tunneled wire, which won't reach its destination.
Create a bypass for flows from 192.168 to 192.168, like so:

flow esp from 192.168.0.0/24 to 192.168.0.0/24 type bypass


That's it! Thanks.

--
Alexey Vatchenko
http://www.bsdua.org



IPSec tunnel problem

2008-02-23 Thread Alexey Vatchenko

Hi guys!

I'm trying to configure IPSec tunnel between home gateway and office 
gateway. Home gateway has dynamic IP, office gateway has static IP.


The problem is when home gateway establishes IPSec tunnel with office 
gateway, computers from office network cannot connect to office gateway 
(but they still can get Internet through the gateway).


Here is what i do:

Office network: 192.168.0.0/24
ipsec.conf: ike passive esp from 192.168.0.0/24 to any local egress 
dstid [EMAIL PROTECTED] psk xxx


Home
ipsec.conf: ike dynamic esp from any to 192.168.0.0/24 peer 
OFFICE_EXTERNAL_IP srcid [EMAIL PROTECTED] psk xxx


So, please, shed some light on what i do wrong.

--
Alexey Vatchenko
http://www.bsdua.org



Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Alexey Vatchenko
On 2008-02-23, Brian A. Seklecki (Mobile) [EMAIL PROTECTED] wrote:

 It should accept SIGINFO (control+G) on most terminals.  


Isn't it control+T?

-- 
Alexey Vatchenko
http://www.bsdua.org



ftp.openbsd.org?

2008-02-04 Thread Alexey Vatchenko

Hi!

I can't get into ftp.openbsd.org and 
http://www.openbsd.org/cgi-bin/cvsweb/ shows me Internal Server Error 
page.


Is it OK?

--
Alexey Vatchenko
http://www.bsdua.org



export NFS mounted fs

2008-01-30 Thread Alexey Vatchenko

Hi!

Any chance to export via NFS filesystem mounted using NFS?

What i need to accomplish is the following:
NFS server -- pf-enabled gateway  NFS client

mountd on gateway tells: Can't get fh for /share
and client tells accordingly: can't access /share: Invalid argument

--
Alexey Vatchenko
http://www.bsdua.org



Re: export NFS mounted fs

2008-01-30 Thread Alexey Vatchenko

Rami Sik wrote:

Why don't you try mounting the exports on NFS server directly from NFS
client? You should be using udp and put some special rules in PF as it
has been suggested in the PF doc.


I didn't do it because it's not easy to update pf with appropriate port 
numbers when mountd starts.


Unfortunately, i can't find anything regarding NFS (except scrubing).
Please, point me to what you mean.

Thanks.

--
Alexey Vatchenko
http://www.bsdua.org



Re: vlan configuration: off-topic

2008-01-18 Thread Alexey Vatchenko
On 2008-01-18, Diana Eichert [EMAIL PROTECTED] wrote:
 On Fri, 18 Jan 2008, John Nietzsche wrote:

 Dear gentleman,
  ^^^ means one of them :)



Re: most secure graphical browser

2008-01-18 Thread Alexey Vatchenko
On 2008-01-18, Douglas A. Tutty [EMAIL PROTECTED] wrote:
 On Thu, Jan 17, 2008 at 06:24:16PM -0700, Clint Pachl wrote:
 If you want security, get rid of X.
 
 Even if it's OpenBSD's X?  The one that you need should you need to
 build any ports (including if you follow current and need security fixes
 to any ports)?

http://marc.info/?l=openbsd-miscm=114738577123893w=2

-- 
Alexey Vatchenko
http://www.bsdua.org



Re: most secure graphical browser

2008-01-18 Thread Alexey Vatchenko
On 2008-01-18, Tony Abernethy [EMAIL PROTECTED] wrote:
 Alexey Vatchenko wrote:
 On 2008-01-18, Douglas A. Tutty [EMAIL PROTECTED] wrote:
  On Thu, Jan 17, 2008 at 06:24:16PM -0700, Clint Pachl wrote:
  If you want security, get rid of X.
  
  Even if it's OpenBSD's X?  The one that you need should you need to
  build any ports (including if you follow current and need 
 security fixes
  to any ports)?
 
 http://marc.info/?l=openbsd-miscm=114738577123893w=2

 Making X and no-X versions of everything has gotta be a pain.
 The security problem with X is that the (blobby?) video 
 card has got better access to memory than the OS.

The problem is not in blobbyness (all drivers that come with OpenBSD are open
sourced), the problem is that the userland program (X server) has access to the
things that must be allowed only to kernel.

-- 
Alexey Vatchenko
http://www.bsdua.org



CDMA modem control utility

2008-01-02 Thread Alexey Vatchenko
Hi!

Recently i started project ``CDMA modem control utility''. Currently it
partially supports two C-motech modems (CCU-550, CCU-650U). These two modems
are popular here at Ukraine (people.net.ua).

The program can do the following:
- Change/set/enable/disable PIN code.
- Send/receive SMS
- Manage phonebook
- Set modem modes

The code is BSD licensed, so you can use and reuse it :)
For all who wants it: http://www.bsdua.org/cdma.html

Thanks!

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: possible bug in CDROM recognition?

2008-01-02 Thread Alexey Vatchenko
On 2008-01-02, Russell Gadd [EMAIL PROTECTED] wrote:
 So maybe there is a minor bug in how hardware is recognised. Does anyone
 want a more detailed description with dmesg output? (before and after). I
 have to admit not looking for any similar bug reports, but I will if the
 folks here who know a thing or two want me to file a bug report, in which
 case please give a few bried pointers as to where to do it.

dmesg will shed some light on this.

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: Recommendations for a wireless USB adapter

2007-11-23 Thread Alexey Vatchenko
On 2007-11-23, Jonathan Schleifer [EMAIL PROTECTED] wrote:
 Alexey Vatchenko [EMAIL PROTECTED] wrote:

 What driver does it use?

 wi(4).

I bought today DWL-G122, it's rum(4):
rum0 at uhub4 port 2 Ralink 802.11 bg WLAN rev 2.00/0.01 addr 2
rum0: MAC/BBP RT2573 (rev 0x2573a), RF RT2528, address 00:1b:11:18:a2:9c

I've not tested it yet, so not comments...

In shop i also tried DWL-G132:
uath0 at uhub1 port 2 Atheros Communications Inc USB WLAN Device rev 
2.00/0.01 addr 2
uath0: error 2, could not read firmware uath-ar5523

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: Recommendations for a wireless USB adapter

2007-11-22 Thread Alexey Vatchenko
On 2007-11-22, Jonathan Schleifer [EMAIL PROTECTED] wrote:
 Erik WikstrC6m [EMAIL PROTECTED] wrote:

 So I will need to use an USB adapter for the
 wireless network and was wondering what people would recommend.

 I'm using a D-Link DWL 122 without any problems. Works out of the box
 on USB, plug it and use it. Even in AP mode.

What driver does it use?

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



max number of groups

2007-10-25 Thread Alexey Vatchenko
Hi!
I'm running an OpenBSD server with a lot of users and project groups.
Each project has its own group or two to protect it's files from other
users.

As i know each user can have not greater than 16 groups.
As the solution, i can change value of NGROUPS_MAX in sys/syslimits.h.
But it requires ``world'' rebuild and building packages from ports.

How do you guys usually solve this problem when user needs to be member of
more than 16 groups?

Thanks.

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: COM ports

2007-10-18 Thread Alexey Vatchenko
2007-10-18, Artur Litwinowicz [EMAIL PROTECTED] writes:
 Which device in OpenBSD represents COM port and maybe it needs some extra

 steps ? Currently on my box runs OpenBSD 4.0 (the most wonderful system on

 the World : 

man 4 cua

/dev/cua0* -- real serial ports
/dev/cuaU* -- USB serial ports

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



redirect network traffic - netfwd project

2007-10-12 Thread Alexey Vatchenko
Hi!
I wrote a little utility and want to share it with you. It allows to
redirect incoming connections to remote (and also local) host. For
example, it listens for incoming TCP connections, accepts them and
creates connection with remote host.

But it works not only with TCP. One can easily redirect the following:
 - TCP
 - UDP
 - UNIX socket (SOCK_STREAM)
 - UNIX socket (SOCK_DGRAM)
 - serial port (actually, tty device).

And it doesn't matter what into what you redirect :)

For example, you can give your chrooted web server access to MySQL not
enabling networking in MySQL:

# netfwd unix stream /chroot/.../mysql.sock unix stream /.../mysql.sock

Any connects are welcome!

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: redirect network traffic - netfwd project

2007-10-12 Thread Alexey Vatchenko
And, of cause, you can get it here:
http://www.bsdua.org/netfwd.html

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: redirect network traffic - netfwd project

2007-10-12 Thread Alexey Vatchenko
On 2007-10-12, Karl Sjodahl - dunceor [EMAIL PROTECTED] wrote:
 On 10/12/07, Alexey Vatchenko [EMAIL PROTECTED] wrote:
 I wrote a little utility and want to share it with you. It allows to
 redirect incoming connections to remote (and also local) host. For
 example, it listens for incoming TCP connections, accepts them and
 creates connection with remote host.
 If you want it to be widely used by OpenBSD users just make a port of
 it and I bet it will get wider use.

Makes sense, thank you.

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: Encrypting home partition

2007-10-09 Thread Alexey Vatchenko
On 2007-10-08, Nick Guenther [EMAIL PROTECTED] wrote:
 So you mean you have a /home partition, which contains an encrypted
 image, and then you mount the encrypted image over top of your /home?
 Because that's what I was thinking / what I think is being asked about.

I have /home partition. I have user.
In /home/user i have image file. When user logs in he (me) does the
following:
$ sudo mnt.sh
$ exec ksh -l

After ``mnt.sh'' content of user's homedir is substituted because
encrypted image is mounted over it.

$ df | grep home
/dev/sd0g 41280412   8194480  3102191221%/home
/dev/svnd0c8057980   6231232   142385281%/home/user

Mnt.sh script does the following:
 - vnconfig
 - fsck
 - mount

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: termios, setting stopbits question

2007-10-05 Thread Alexey Vatchenko
On 2007-10-04, Christian Weisgerber [EMAIL PROTECTED] wrote:
 So you just set five data bits, no parity, CSTOPB, and you'll be
 fine.  Just why you would need this is beyond me, though.  The only
 application that comes to mind is interfacing with 50-year-old
 teletype equipment.

Thanks for the answer. Actually, it's just an option for my program. A
lot of non-unix programs provide this option for ``stop bits''.
Now, my program allows to do the following (this functionality is not
released yet):
sudo netfwd tcp  cua /dev/cuaU0 115200,8,N,1,H

It accepts incoming TCP connections on port  and redirect all data
to serial port (my phone in this example).
Then you can take one of the programs from
http://en.wikipedia.org/wiki/COM_port_redirector
and use your modems remotely :)

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



termios, setting stopbits question

2007-10-04 Thread Alexey Vatchenko
Hi guys!

I'm adding serial port support to my ``netfwd''
(http://www.bsdua.org/netfwd.html) and faced a problem.

How is it possible to set 1.5 stopbits in tcsetattr(3) ?
The only thing that i found related to stopbits is CSTOPB (2 stopbits). But iirc
5 databits can be used in conjunction with 1 or 1.5 stopbits.

Thanks in advance.

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



NFS regress

2007-08-31 Thread Alexey Vatchenko
Hi!

Does anyone notice some problems with NFS?
I had the following configuration and it worked: OpenBSD 3.9 server
exports fs to FreeBSD 5.x server.

But when i reinstall both servers to OpenBSD 4.1 NFS started hanging. From
time to time when i access mounted NFS volume the shell freezes.
Also i noticed that software that uses NFS started hanging... amd,
sharity-light.

Thanks.

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: About encryption

2007-07-28 Thread Alexey Vatchenko
Hi!

On 2007-07-25, Brian Hansen [EMAIL PROTECTED] wrote:
 I have no prior experience in encryption but wants to figure out how to - as
 safe as possible - encrypt some files on my computer. I have been looking at
 both GNUPG and Mcrypt. I am not interested in the KEY part of GNUPG but only
 encrypting files.

 Which - if any - would you recommend for the task and using what algorithms?

The coolest way is to use vnconfig(8).
It allows you to create container for your secret files. You can mount it and
work with your files as if they were unencrypted (on-fly encryption).

Refer to vnconfig(8) or mount_vnd(8) in -current.

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



compiled-in binary tree: fsss project

2007-07-25 Thread Alexey Vatchenko
Hi!
I developed a useful (for me :) utility that probably can be useful for
someone else. It's BSD licensed.
It generates .c and .h files with sorted keys and provides programer
with _search_ function that takes key as argument and returns pointer to
the structure. Key and values are read from special file with very
simple format:
key {field1, field2, fieldn}
key2 key2_alias1 {field1, field2, fieldn}

It just like have filled binary tree at start of a program. So,
programer doesn't need to sort data at start, he has them sorted
already.

Read more: http://www.bsdua.org/fsss.html
Or better download source code: http://www.bsdua.org/files/fsss.tar.gz

Thanks. Any comments are welcome.

PS: fsss means Fast  Simple Structure Search :)

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: X with XGI Volari Z7

2007-07-12 Thread Alexey Vatchenko
On 2007-07-12, Matthieu Herrb [EMAIL PROTECTED] wrote:
 On 7/11/07, Alexey Vatchenko [EMAIL PROTECTED] wrote:
 Hi!
 I have motherboard Tyan n3400B with XGI Volari Z7 video card:

 vga1 at pci1 dev 10 function 0 XGI Technology Volari Z7 rev 0x00

 Have anyone successfully run X with more than 8bpp (and more than 320x200)?


 The sis X.Org driver should work for this chipset.

That's it! Thanks!


-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



T-shirts problem!

2007-07-11 Thread Alexey Vatchenko
Hi!
Today i was told that Mean 2.8 T-shirt and 2.8 Cute Sushi Fugu would be
discontinued and my order was cancelled. But they are the best t-shirts
including Wireframe of course.

So, is it really the end for them?

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Is vendorwatch.org dead?

2007-06-05 Thread Alexey Vatchenko
Hi!

Is vendorwatch.org dead permanently or it's just sort of reconstruction?

-- 
Alexey Vatchenko
http://www.bsdua.org
E-mail: [EMAIL PROTECTED]
JID: [EMAIL PROTECTED]



Re: UTF-8 - wchar_t

2007-03-01 Thread Alexey Vatchenko

Cory Albrecht wrote:

Alexey Vatchenko wrote:

PS: sorry for self promotion, but it's all about not to invent a wheel


While I admire your effort, that's exactly what you did. Sorry. :-)

http://www.gnu.org/software/libiconv/documentation/libiconv/iconv_open.3.html 


Oh, i invented BSD licensed wheel :) It's just a matter of license.

--
Alexey V. Vatchenko
http://www.bsdua.org
JID: [EMAIL PROTECTED]



UTF-8 - wchar_t

2007-02-24 Thread Alexey Vatchenko

Hi!

I have implemented utf-8 - unicode conversion library for my project. 
It's BSD licensed. So, if anyone wants they can freely use it in your 
own project.


http://www.bsdua.org/files/unicode.tar.gz

PS: sorry for self promotion, but it's all about not to invent a wheel

--
Alexey V. Vatchenko
http://www.bsdua.org
JID: [EMAIL PROTECTED]



SASL Digest-MD5 implementation (BSD licensed)

2007-01-27 Thread Alexey Vatchenko

Hi!

I've written library for SASL Digest-MD5 authentication (on client side 
yet) for my project. If you want you can use it freely in your projects. 
It lacks auth-int and auth-conf but still very functional for most 
cases. Source code is BSD licensed.


http://www.bsdua.org/files/digestmd5.tar.gz

(refer http://www.bsdua.org/libbsdua.html for usage example)

If it's useful for you or you have comments, just drop me private email.

PS: It's written on OpenBSD and i didn't try to compile it anywhere else.

--
Alexey V. Vatchenko
http://www.bsdua.org
JID: [EMAIL PROTECTED]
ICQ: 162799204



USB modem

2006-07-01 Thread Alexey Vatchenko
Hi!

I need inexpensive USB modem for Dial-Up (not ADSL, not GPRS).
Any advices?

-- 
Alexey V. Vatchenko
http://psytech.h10.ru
JID: [EMAIL PROTECTED]
ICQ: 162799204



T-short ordering to Ukraine

2006-04-03 Thread Alexey Vatchenko
Hi!

I'd like to buy the Wireframe Puffy.
Has anyone order t-short from Ukraine?
How many extra money does it take to deliver it to Ukraine?

-- 
Alexey V. Vatchenko
http://psytech.h10.ru
JID: [EMAIL PROTECTED]
ICQ: 162799204



Re: cardbus cant map interrupt - asus pundit barebone

2006-02-17 Thread Alexey Vatchenko
[EMAIL PROTECTED] wrote:
 cbb0 at pci2 dev 12 function 0 vendor ENE, unknown product 0x1411 rev
 0x02pci_intr_map: no mapping for pin A
 : couldn't map interrupt

To get rid of this message find pcibios0 at bios0 ... line in your
kernel config file and change flags to 0x0042. Then recompile kernel
and boot it. If you have any PCMCIA card try it. It'd be interesting to
know the results.

-- 
%cat ~/doc/personal.txt
mailto: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]



Re: cardbus cant map interrupt - asus pundit barebone

2006-02-17 Thread Alexey Vatchenko
mickey wrote:
 On Fri, Feb 17, 2006 at 01:14:25PM +0200, Alexey Vatchenko wrote:
 of course the right way is to boot into UKC:
 
 boot -c
 ...
 UKC change pcibios
 change pcibios (y/n)? y
 flags [0x0]: 0x30
 UKC exit
 
 and send a full dmesg then please.

http://psytech.h10.ru/full_dmesg.txt

-- 
%cat ~/doc/personal.txt
mailto: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]



Re: OpenBSD on Acer TravelMate 2313

2005-06-30 Thread Alexey Vatchenko

Alexander von Gernler wrote:
I'm going to buy Acer TravelMate 2313 notebook 


[skip]


The normal place to look for things like this would be [1].
[1] http://www.openbsd.org/i386-laptop.html


Thanks. So i have a chance to be the first :)

--
%cat ~/doc/personal.txt
mailto: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]
   ICQ: 162799204



OpenBSD on Acer TravelMate 2313

2005-06-29 Thread Alexey Vatchenko

Hi.
I'm going to buy Acer TravelMate 2313 notebook 
(http://global.acer.com/products/notebook/tm2300.htm) and i want to hear 
 from you guys any experience of using it with OpenBSD.


--
%cat ~/doc/personal.txt
mailto: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]
   ICQ: 162799204



Re: OpenNTPd issue

2005-06-06 Thread Alexey Vatchenko

Kvvesdan Gabor wrote:

The time sample was rejected because: The peer's stratum is less than the
host's stratum.

I had the same issue too. But i've solved it by pressing several times 
on Update now button on winxp.


--
%cat ~/doc/personal.txt
mailto: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]
   ICQ: 162799204