sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Paul de Weerd
For the sendmail heroes out there...  Let's say I have the following
in DNS:

$ORIGIN example.com.
@   IN  MX  10  mx1
@   IN  A   192.0.2.1
@   IN  2001:db8::1
mx1 IN  A   192.0.2.2
mx1 IN  2001:db8::2
www IN  A   192.0.2.1
www IN  2001:db8::1

$ORIGIN 2.0.192.in-addr.arpa.
1   IN  PTR example.com.
2   IN  PTR mx1.example.com.

$ORIGIN 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
1   IN  PTR example.com.
2   IN  PTR mx1.example.com.

(assume there's SOA and NS records too, they're not relevant to the
question)

Now on machine 'www.example.com' (this is the hostname set in
/etc/myname) I would like to send e-mail to x...@example.com.  However,
sendmail ignores the MX record and attempts local delivery (which
fails, because 'xxx' is not a local user).

There's a ton of ways to solve this:

- get rid of sendmail
- change PTR records to www.example.com
- relay all mail via a smarthost (e.g. mx1.example.com)
- rewrite to @mx1.example.com and fix on mx1
- run a local resolver that lies about PTRs
- ...

However, I'd like to not do any of these but simply instruct sendmail
to ignore what PTRs are saying local IPs are called.  I don't want to
make an exception for whatever happens to be in PTR, my sendmail
config is vanilla OpenBSD defaults and I expect all mail to be
delivered according to what's in DNS (except for mail to
www.example.com, the actual hostname (although I'd be interested to
learn how to do the same for mails directed @www.example.com)).

Can anybody think of a way to achieve this ?

Thanks,

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Jérémie Courrèges-Anglas
Paul de Weerd  writes:

> For the sendmail heroes out there...  Let's say I have the following
> in DNS:
>
> $ORIGIN example.com.
> @ IN  MX  10  mx1
> @ IN  A   192.0.2.1
> @ IN  2001:db8::1
> mx1   IN  A   192.0.2.2
> mx1   IN  2001:db8::2
> www   IN  A   192.0.2.1
> www   IN  2001:db8::1
>
> $ORIGIN 2.0.192.in-addr.arpa.
> 1 IN  PTR example.com.
> 2 IN  PTR mx1.example.com.
>
> $ORIGIN 
> 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
> 1 IN  PTR example.com.
> 2 IN  PTR mx1.example.com.
>
> (assume there's SOA and NS records too, they're not relevant to the
> question)
>
> Now on machine 'www.example.com' (this is the hostname set in
> /etc/myname) I would like to send e-mail to x...@example.com.  However,
> sendmail ignores the MX record and attempts local delivery (which
> fails, because 'xxx' is not a local user).
>
> There's a ton of ways to solve this:
>
>   - get rid of sendmail
>   - change PTR records to www.example.com

I'd really go with this.

>   - relay all mail via a smarthost (e.g. mx1.example.com)
>   - rewrite to @mx1.example.com and fix on mx1
>   - run a local resolver that lies about PTRs
>   - ...
>
> However, I'd like to not do any of these but simply instruct sendmail
> to ignore what PTRs are saying local IPs are called.  I don't want to
> make an exception for whatever happens to be in PTR, my sendmail
> config is vanilla OpenBSD defaults and I expect all mail to be
> delivered according to what's in DNS (except for mail to
> www.example.com, the actual hostname (although I'd be interested to
> learn how to do the same for mails directed @www.example.com)).
>
> Can anybody think of a way to achieve this ?

http://weldon.whipple.org/sendmail/removew.html discusses this and gives
solutions.

HTH

> Thanks,
>
> Paul 'WEiRD' de Weerd


-- 
Jérémie Courrèges-Anglas
GPG Key fingerprint: 61DB D9A0 00A4 67CF 2A90  8961 6191 8FBF 06A1 1494



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Maurice Janssen
On Thu, Mar 21, 2013 at 12:23:18PM +0100, Paul de Weerd wrote:
>For the sendmail heroes out there...  Let's say I have the following
>in DNS:
>
>$ORIGIN example.com.
>@  IN  MX  10  mx1
>@  IN  A   192.0.2.1
>@  IN  2001:db8::1
>mx1IN  A   192.0.2.2
>mx1IN  2001:db8::2
>wwwIN  A   192.0.2.1
>wwwIN  2001:db8::1
>
>$ORIGIN 2.0.192.in-addr.arpa.
>1  IN  PTR example.com.
>2  IN  PTR mx1.example.com.
>
>$ORIGIN 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
>1  IN  PTR example.com.
>2  IN  PTR mx1.example.com.
>
>(assume there's SOA and NS records too, they're not relevant to the
>question)
>
>Now on machine 'www.example.com' (this is the hostname set in
>/etc/myname) I would like to send e-mail to x...@example.com.  However,
>sendmail ignores the MX record and attempts local delivery (which
>fails, because 'xxx' is not a local user).

Are you sure this is becaus of the PTR record (according to the subject of
your email)?  I think sendmail looks up the A and MX record for
example.com and sees that the A record is a local IP.
So, do you need the A record for example.com?  In case this record is only
needed for those who omit www when trying to visit your website, you might
try to use a CNAME instead.

Maurice



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Vijay Sankar
mailertable should work in this case, I think. 

Vijay Sankar
ForeTell Technologies Limited
vsan...@foretell.ca

Sent from my iPhone 

On 2013-03-21, at 7:23 AM, Paul de Weerd  wrote:

> For the sendmail heroes out there...  Let's say I have the following
> in DNS:
> 
> $ORIGIN example.com.
> @INMX10mx1
> @INA192.0.2.1
> @IN2001:db8::1
> mx1INA192.0.2.2
> mx1IN2001:db8::2
> wwwINA192.0.2.1
> wwwIN2001:db8::1
> 
> $ORIGIN 2.0.192.in-addr.arpa.
> 1INPTRexample.com.
> 2INPTRmx1.example.com.
> 
> $ORIGIN 
> 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
> 1INPTRexample.com.
> 2INPTRmx1.example.com.
> 
> (assume there's SOA and NS records too, they're not relevant to the
> question)
> 
> Now on machine 'www.example.com' (this is the hostname set in
> /etc/myname) I would like to send e-mail to x...@example.com.  However,
> sendmail ignores the MX record and attempts local delivery (which
> fails, because 'xxx' is not a local user).
> 
> There's a ton of ways to solve this:
> 
>- get rid of sendmail
>- change PTR records to www.example.com
>- relay all mail via a smarthost (e.g. mx1.example.com)
>- rewrite to @mx1.example.com and fix on mx1
>- run a local resolver that lies about PTRs
>- ...
> 
> However, I'd like to not do any of these but simply instruct sendmail
> to ignore what PTRs are saying local IPs are called.  I don't want to
> make an exception for whatever happens to be in PTR, my sendmail
> config is vanilla OpenBSD defaults and I expect all mail to be
> delivered according to what's in DNS (except for mail to
> www.example.com, the actual hostname (although I'd be interested to
> learn how to do the same for mails directed @www.example.com)).
> 
> Can anybody think of a way to achieve this ?
> 
> Thanks,
> 
> Paul 'WEiRD' de Weerd
> 
> -- 
>> [<++>-]<+++.>+++[<-->-]<.>+++[<+
> +++>-]<.>++[<>-]<+.--.[-]
> http://www.weirdnet.nl/ 



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Jiri B
On Thu, Mar 21, 2013 at 01:40:11PM +0100, Maurice Janssen wrote:
> Are you sure this is becaus of the PTR record (according to the subject of
> your email)?  I think sendmail looks up the A and MX record for
> example.com and sees that the A record is a local IP.
> So, do you need the A record for example.com?  In case this record is only
> needed for those who omit www when trying to visit your website, you might
> try to use a CNAME instead.

sendmail checks /etc/hosts, don't you have example.com as alias there?

if it is PTR issue, this is really stupid.

jirib



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Paul de Weerd
On Thu, Mar 21, 2013 at 01:40:11PM +0100, Maurice Janssen wrote:
| Are you sure this is becaus of the PTR record (according to the subject of
| your email)?  I think sendmail looks up the A and MX record for
| example.com and sees that the A record is a local IP.

Yes, I'm sure.  I'm moving this domain from another machine where I
resolved the issue by changing the PTR for the IP address (adding
www).  The A record for example.com was still a local IP.

| So, do you need the A record for example.com?  In case this record is only
| needed for those who omit www when trying to visit your website, you might
| try to use a CNAME instead.

Yep, I do.  But it's irrelevant, as it's the reverse I'm interested
in.  I'm not sure how to interpret your CNAME suggestion though - you
can't define CNAMEs when other records exist (e.g. NS, SOA, MX, or
what have you for @).

Cheers,

Paul 'WEiRD' de Weerd

PS: Bonjour, monsieur Le Hen ;)

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Paul de Weerd
On Thu, Mar 21, 2013 at 07:32:46AM -0400, Vijay Sankar wrote:
| mailertable should work in this case, I think. 

That's not how I read the comments in /etc/mail/mailertable:

# The sendmail(8) mailer table is used to override routing for particular
# non-local hostnames and domains (i.e., names other the local hostname
# or names listed in local-host-names).

The way I understand the mailertable is to do the exact opposite of
what I want (so you're about to deliver to a remote host but then look
that host up in your mailertable and have that decide delivery).

Cheers,

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Paul de Weerd
On Thu, Mar 21, 2013 at 01:11:36PM +0100, Jérémie Courrèges-Anglas wrote:
| > - change PTR records to www.example.com
| 
| I'd really go with this.

That's what I'll do if I can't resolve this in another (nice) way...

| http://weldon.whipple.org/sendmail/removew.html discusses this and gives
| solutions.

So, "define(`confDONT_PROBE_INTERFACES', `true')dnl" looks like the
way to go.  It feels a bit like using a sledgehammer to kill a fly,
but I'll give it a shot.

Thanks!

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



ospfd OOM crash

2013-03-21 Thread MJ
Hi,

On two occasions (had to test it to see if it was repeatable), ospfd has 
crashed  on my 5.2 release i386 machine while I was running a ruby script that 
consumed too much memory (which also crashed). No other daemons on the machine 
crashed except ospfd. Needless to say, my network also went down…

I am not sure how the OpenBSD OOM killer works, but IMO important daemons such 
as ospfd should be exempted.


Thanks.



Re: ospfd OOM crash

2013-03-21 Thread Paul de Weerd
On Thu, Mar 21, 2013 at 03:32:58PM +0200, MJ wrote:
| Hi,
| 
| On two occasions (had to test it to see if it was repeatable), ospfd
| has crashed  on my 5.2 release i386 machine while I was running a ruby
| script that consumed too much memory (which also crashed). No other
| daemons on the machine crashed except ospfd. Needless to say, my
| network also went down…
| 
| I am not sure how the OpenBSD OOM killer works, but IMO important
| daemons such as ospfd should be exempted.

IMO important machines shouldn't be abused to run scripts that consume
much memory.  You want to exempt ospfd.  How about sshd ?  Maybe
bgpd ?  What else ?  You'll never reach consensus, so just don't shoot
yourself in your foot and be done with it.

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: i965 DRI crashes with 5.2

2013-03-21 Thread Chris Cappuccio
Alan Corey [alan01...@gmail.com] wrote:
> 
> Not much to go on probably, but anyone else seeing this?
> 

OpenBSD 5.3-current (post 5.3 release) now supports the latest
Intel XF86 driver with KMS. It's worth trying before you do
look at much else. See the snapshots/i386 or snapshots/amd64
directory. Do a full upgrade.



Re: CVS: cvs.openbsd.org: src - kms

2013-03-21 Thread Chris Cappuccio
Kevin Chadwick [ma1l1i...@yahoo.co.uk] wrote:
> Made my day.
> 
> So does this mean machdep can be turned off for some hardware and is
> the best way to find out, simply to try?
> 

If inteldrm attaches, the aperture now appears to work at 1 (instead 
of 2) but not yet 0.



Re: ospfd OOM crash

2013-03-21 Thread Chris Cappuccio
MJ [m...@sci.fi] wrote:
> Hi,
> 
> On two occasions (had to test it to see if it was repeatable), ospfd has 
> crashed  on my 5.2 release i386 machine while I was running a ruby script 
> that consumed too much memory (which also crashed). No other daemons on the 
> machine crashed except ospfd. Needless to say, my network also went down?
> 

So rebuild ospfd with -g, get a backtrace for the crash, look at the
source code, and see if you can improve its behavior in this odd
situation.

Running ospfd out of memory is always likely to have a negative
impact on your networking capability, since it needs to allocate memory
as part of its normal activity. This is why you have things like
per-user/class memory limitations, and swap space, on normal machines,
to prevent these exact situations from occuring.



usb question

2013-03-21 Thread Zoran Kolic
Does someone experience any usb problem on lattest
current?
The very reason to ask is unpredictible behaveour
of keyboard and mouse, connected to the node through
usb switch. Yesterday I had a lot of errors and had
to stop X and do a lot of things. Today, it all works
like a charm. Like a ghost in a machine.
If needed I will provide dmesg and other data.
Best regards

Zoran



Re: sendmail stops remote delivery when PTR for local IP points to domain-part

2013-03-21 Thread Vijay Sankar
Sorry, I misunderstood. I thought you wanted mail from www.example.com 
addressed to u...@example.com to go to a specific mail server and not be 
delivered to a local account. Did not clue in that you were using example.com 
to refer to ALL domains, not just your own domain. 

Vijay Sankar
ForeTell Technologies Limited
vsan...@foretell.ca

Sent from my iPhone 

On 2013-03-21, at 9:20 AM, Paul de Weerd  wrote:

> On Thu, Mar 21, 2013 at 07:32:46AM -0400, Vijay Sankar wrote:
> | mailertable should work in this case, I think. 
> 
> That's not how I read the comments in /etc/mail/mailertable:
> 
> # The sendmail(8) mailer table is used to override routing for particular
> # non-local hostnames and domains (i.e., names other the local hostname
> # or names listed in local-host-names).
> 
> The way I understand the mailertable is to do the exact opposite of
> what I want (so you're about to deliver to a remote host but then look
> that host up in your mailertable and have that decide delivery).
> 
> Cheers,
> 
> Paul 'WEiRD' de Weerd
> 
> -- 
>> [<++>-]<+++.>+++[<-->-]<.>+++[<+
> +++>-]<.>++[<>-]<+.--.[-]
> http://www.weirdnet.nl/ 



Fallthrough in ssh_config

2013-03-21 Thread Ryan Kavanagh
Is there a way to have Host stanzas in an ssh_config containing a
HostName entry match Host stanzas corresponding to said HostName? In
other words, given an ssh config

Host blah
HostName blah.example.org

Host *.example.org
User bob

can I have "ssh blah" also use the settings in the "*.example.org"? This
is similar to the existing fallthrough of

Host *.abc.example.org
User eve

Host *.example.org
User bob
UserKnownHostsFile somefile

where "ssh def.abc.example.org" uses username eve and checks the host's
key against "somefile".

Best wishes,
Ryan

-- 
|_)|_/  Ryan Kavanagh   | Debian Developer
| \| \  http://ryanak.ca/   | GPG Key 4A11C97A



Hosted Exchange Alana Notebook Hediye

2013-03-21 Thread EnGuclu Bilisim
Hosted Exchange Hizmetine Notebook Hediye






Exchange Kobi:



- 1-75 Kullanıcı arası
- 5 GB Mailbox alanı
- 1 adet Database
- Ortak Adres Defteri
- 5 Adet Dağıtım Grubu
- Symantec Brightmail Premium Anti-Spam
- Exchange Server 2010
- 50 MB Standart Web Hosting Hizmeti
- Microsoft Outlook, Mac, IPAD, Windows Phone ve Blackberry desteği
- Mailbox/Ay: 5TL+KDV







Exchange Pro :

- 75 Kullanıcı üzeri
- 10 GB Mailbox alanı
- 5 adet Database
- Ortak Adres Defteri
- 50 Adet Dağıtım Grubu
- Symantec Brightmail Premium Anti-Spam
- Exchange Server 2010
- 100 MB Standart Web Hosting Hizmeti
- Microsoft Outlook, Mac, IPAD, Windows Phone ve Blackberry desteği
- Mailbox/Ay: 10TL+KDV





Kampanya Hakkında

"Yukarıda belirtilen fiyatlar 2013 Nisan ayı sonuna kadar geçerlidir.. "
SSD Disk performansı 6Gbit veriyolu ve 60.000 IoPs değerleri ile mart2013
nesil sunucular ve yüksek kapasiteler ile hizmet veriyoruz. Farklı config
talepleriniz için bi...@enguclu.com adresine mail ile bildirimde
bulunabilirsiniz.
*Hediye ürünler 2 yıllık taahhüt süresince 1 yıllık ödemesinin peşin
yapılması durumda geçerlidir. Hediye ürünlerin teknik özellikleri ,
alınacak hizmet kapasitesine göre değişir. Hediye ürünlerin detaylı
bilgileri teklif aşamasında tarafınıza iletilecektir. Bu kampanyamız
bireysel müşterilerimizi kapsamamaktadır. Teklif almak için
bi...@enguclu.com adresinden mail ile veya 0850 333 65 66 numaralı
telefonumuzdan bizimle iletişim kurabilirsiniz.

www.EnGuclu.com



EnGüçlü Bilişim & İnternet Hizmetleri Tüm Hakları Saklıdır 2013 |
Hakkımızda | İletişim


Mail listesinden çıkmak istiyorsanız lütfen bu maili boş
cevaplanıyınız.



Re: ospfd OOM crash

2013-03-21 Thread Ted Unangst
On Thu, Mar 21, 2013 at 15:32, MJ wrote:
> Hi,
> 
> On two occasions (had to test it to see if it was repeatable), ospfd has
> crashed  on my 5.2 release i386 machine while I was running a ruby script
> that consumed too much memory (which also crashed). No other daemons on
> the machine crashed except ospfd. Needless to say, my network also went
> down…
> 
> I am not sure how the OpenBSD OOM killer works, but IMO important daemons
> such as ospfd should be exempted.

There is no OOM killer. Your bug report also lacks crucial details
like what it means to crash. Do you mean it logged a message like
"fatal: out of memory"? That's not a crash, that's a message informing
you about an error condition. You fix it by adding more memory.



Re: ospfd OOM crash

2013-03-21 Thread MJ
On Mar 21, 2013, at 10:46 PM, Ted Unangst  wrote:

> 
> There is no OOM killer. Your bug report also lacks crucial details
> like what it means to crash. Do you mean it logged a message like
> "fatal: out of memory"? That's not a crash, that's a message informing
> you about an error condition. You fix it by adding more memory.
> 

Crashed as in disappeared from the process table without a trace in the logs.

It's under supervision now.



Re: Invalid checksum with 82574L (em)

2013-03-21 Thread Hugo Osvaldo Barrera
On 2013-03-21 08:51, Kapetanakis Giannis wrote:
> On 21/03/13 01:37, Hugo Osvaldo Barrera wrote:
> >I've been having a very annoying issue with an 82574L for a pretty long
> >time now.
> >
> >After the PC is turned off (either properly or due to a power failure),
> >the NIC does not work upon the next boot.
> >
> >   em0 at pci1 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00:
msiem0:
> >The EEPROM Checksum Is Not Valid
> >   em0: Unable to initialize the hardware
> >
> >I found an Intel firmware flashing utility for DOS that rebuilds the
> >checksum. After running it, however, my MAC is 00:00:00:00:00:00. I
> >need to set the mac back with it, and make it rebuild the checksum.
> >
> >After I do this, OpenBSD boots fine:
> >
> >   em0 at pci1 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00:
msi,
> >address 00:22:4d:7c:b2:76
> >
> >The NIC is an onboard one, and I've no extra PCI slots, so I can't
> >really change it.
> >
> >Here's my full dmesg in case it's of further use.
> >Please also let me know if there's anything else which may be of use.
> >
> >OpenBSD 5.2-current (GENERIC.MP) #5: Wed Dec 12 23:22:46 MST 2012
> > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> >real mem = 4275666944 (4077MB)
> >avail mem = 4139347968 (3947MB)
> >mainbus0 at root
> >bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xeb920 (27 entries)
> >bios0: vendor Intel Corp. version "MUCDT10N.86A.0072.2012.0808.1512" date
> >08/08/2012
> >bios0: Intel Corporation D2700MUD
> >acpi0 at bios0: rev 2
> >acpi0: sleep states S0 S3 S4 S5
> >acpi0: tables DSDT FACP SSDT APIC MCFG HPET
> >acpi0: wakeup devices SLT1(S4) PS2M(S4) PS2K(S4) UAR1(S3) UAR2(S3)
USB0(S3)
> >USB1(S3) USB2(S3) USB3(S3) USB7(S3) PXSX(S4) RP01(S4) PXSX(S4) RP02(S4)
> >PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PWRB(S4)
> >acpitimer0 at acpi0: 3579545 Hz, 24 bits
> >acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> >cpu0 at mainbus0: apid 0 (boot processor)
> >cpu0: Intel(R) Atom(TM) CPU D2700 @ 2.13GHz, 2133.73 MHz
> >cpu0:
>
>FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLU
S
>
>H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3
,
> >CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF,ITSC
> >cpu0: 512KB 64b/line 8-way L2 cache
> >cpu0: apic clock running at 133MHz
> >cpu1 at mainbus0: apid 1 (application processor)
> >cpu1: Intel(R) Atom(TM) CPU D2700 @ 2.13GHz, 2133.41 MHz
> >cpu1:
>
>FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLU
S
>
>H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3
,
> >CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF,ITSC
> >cpu1: 512KB 64b/line 8-way L2 cache
> >cpu2 at mainbus0: apid 2 (application processor)
> >cpu2: Intel(R) Atom(TM) CPU D2700 @ 2.13GHz, 2133.41 MHz
> >cpu2:
>
>FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLU
S
>
>H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3
,
> >CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF,ITSC
> >cpu2: 512KB 64b/line 8-way L2 cache
> >cpu3 at mainbus0: apid 3 (application processor)
> >cpu3: Intel(R) Atom(TM) CPU D2700 @ 2.13GHz, 2133.41 MHz
> >cpu3:
>
>FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLU
S
>
>H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3
,
> >CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF,ITSC
> >cpu3: 512KB 64b/line 8-way L2 cache
> >ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
> >ioapic0: misconfigured as apic 0, remapped to apid 8
> >acpimcfg0 at acpi0 addr 0xe000, bus 0-63
> >acpihpet0 at acpi0: 14318179 Hz
> >acpiprt0 at acpi0: bus 0 (PCI0)
> >acpiprt1 at acpi0: bus 2 (P0P1)
> >acpiprt2 at acpi0: bus 1 (RP01)
> >acpiprt3 at acpi0: bus -1 (RP02)
> >acpiprt4 at acpi0: bus -1 (RP03)
> >acpiprt5 at acpi0: bus -1 (RP04)
> >acpicpu0 at acpi0
> >acpicpu1 at acpi0
> >acpicpu2 at acpi0
> >acpicpu3 at acpi0
> >acpibtn0 at acpi0: PWRB
> >acpibtn1 at acpi0: SLPB
> >acpivideo0 at acpi0: GFX0
> >acpivout0 at acpivideo0: DD02
> >pci0 at mainbus0 bus 0
> >pchb0 at pci0 dev 0 function 0 vendor "Intel", unknown product 0x0bf3 rev
> >0x03
> >vga1 at pci0 dev 2 function 0 vendor "Intel", unknown product 0x0be2 rev
0x09
> >wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> >wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> >intagp at vga1 not configured
> >azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: msi
> >azalia0: codecs: Realtek ALC662
> >audio0 at azalia0
> >ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: msi
> >pci1 at ppb0 bus 1
> >em0 at pci1 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: msi,
> >address 00:22:4d:7c:b2:76
> >uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 8 int
23
> >uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x02: apic 8 int
19
> >uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x02: apic 8 int
18
> >uhci3 at pci0 dev 29 function 3 "Intel 828

Re: Fallthrough in ssh_config

2013-03-21 Thread Darren Tucker
On Fri, Mar 22, 2013 at 7:30 AM, Ryan Kavanagh  wrote:
> Is there a way to have Host stanzas in an ssh_config containing a
> HostName entry match Host stanzas corresponding to said HostName? In
> other words, given an ssh config
>
> Host blah
> HostName blah.example.org
>
> Host *.example.org
> User bob
>
> can I have "ssh blah" also use the settings in the "*.example.org"?

No, not currently.  The matching of Host is done on the name you
provide to the ssh command, not whatever the name/address ultimately
resolves to, and they're simple string matches.

There is an open enhancement request to let it match subnets, which
may or may not be sufficient for what you want
(https://bugzilla.mindrot.org/show_bug.cgi?id=1169).

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.



Re: Fallthrough in ssh_config

2013-03-21 Thread Ryan Kavanagh
On Fri, Mar 22, 2013 at 10:40:18AM +1100, Darren Tucker wrote:
> No, not currently.

Bummer.
 
> There is an open enhancement request to let it match subnets, which
> may or may not be sufficient for what you want
> (https://bugzilla.mindrot.org/show_bug.cgi?id=1169).

Not quite. What I was looking for is much simpler than what was
described there, and doesn't require worrying about a name resolving to
multiple addresses, two passes through the config file, etc. I've
written up a patch adding the functionality[0] and submitted it to
openssh-unix-dev; what I intended is probably clearer from the examples
I gave and the patch.

Thanks for your time.

Best wishes,
Ryan

[0] https://lists.mindrot.org/pipermail/openssh-unix-dev/2013-March/031166.html

-- 
|_)|_/  Ryan Kavanagh   | Debian Developer
| \| \  http://ryanak.ca/   | GPG Key 4A11C97A



Re: i965 DRI crashes with 5.2

2013-03-21 Thread Alan Corey
Forget it.  I'm almost finished a clean install of 5.2 that's taken
about 2 months by modem.  I'll live with a reduced number of
screensavers.  I just wanted to mention that there is a problem.  I
don't have the bandwidth to fool around with current and replacing it
every week.

  Alan

On 3/21/13, Chris Cappuccio  wrote:
> Alan Corey [alan01...@gmail.com] wrote:
>>
>> Not much to go on probably, but anyone else seeing this?
>>
>
> OpenBSD 5.3-current (post 5.3 release) now supports the latest
> Intel XF86 driver with KMS. It's worth trying before you do
> look at much else. See the snapshots/i386 or snapshots/amd64
> directory. Do a full upgrade.
>


-- 
Credit is the root of all evil.  - AB1JX



Re: start sshd before nfs

2013-03-21 Thread Ted Unangst
On Tue, Mar 19, 2013 at 18:09, Ted Unangst wrote:
> On Tue, Mar 19, 2013 at 18:17, matteo filippetto wrote:
>> Hi,
>>
>> what do you think about starting sshd before mount NFS resources?
> 
> ssh comes last because users are not allowed onto the system until the
> system is ready.

oh, and if there were any doubts about what it means for the system to
be ready...

https://www.usenix.org/conference/usenixsecurity12/mining-your-ps-and-qs-detection-widespread-weak-keys-embedded-devices

key quote:

"Although Ubuntu
tries to restore entropy saved during the last shutdown,
this happens slightly after the point when sshd first reads
from urandom. With no entropic inputs, urandom produces
a deterministic output stream."

oops.