hardware issues on sparc64

2005-08-08 Thread Bob Ababurko

hello-

I am trying to load 3.5 sparc64 on an Ultra2.  After booting from the CD 
I get an error message that says( i think) it cannot find the cd-drive 
or file on the CD.  That makes little sense since I see it start to boot 
the CD.  Is this a bad burn?  I know the disc worksused it many 
times.  Degraded?


Any ideas on the error?


ok boot cdrom
Boot device: /sbus/SUNW,[EMAIL PROTECTED],880/[EMAIL PROTECTED],0:f  File and args: 
kernel/sparcv9/un

ix
OpenBSD IEEE 1275 Bootblock 1.1
..>> OpenBSD 3.5 (obj) #0: Mon Mar 29 12:00:16 MST 2004
[EMAIL PROTECTED]:/usr/src/sys/arch/sparc64/stand/ofwboot/obj
open /[EMAIL PROTECTED],0/SUNW,[EMAIL PROTECTED],880/[EMAIL PROTECTED],0:f/kernel/sparcv9/unix: No such 
file or

 directory

thanks,
Bob



RAID cards in sparc64 hardware?

2005-10-10 Thread Bob Ababurko

Hello-

in reading the thread about running pf on an ultra 5, I saw that people 
were running fxp NICs in them.  I started thinking about the possibility 
of running a Mylex Acceleraid 250 or any other RAID controller that 
OpenBSD supports in an Ultra5.


I have been caught up in thinking that these nics and RAID controllers 
needed to be run in i386 hardware.  So I just tested out my realtek 
NICs, and they work in the sparc64, what about RAID controllers that I 
have always associated with PC's?


-Bob



[Fwd: RAID cards in sparc64 hardware?]

2005-10-10 Thread Bob Ababurko
Ok, I found the supported hardware for the sparc64 platform.  I guess it 
does not have any RAID controllers that work.  That is too mad since I 
am really fond of sparc hardware.


-Bob

 Original Message 
From: - Mon Oct 10 17:30:00 2005
X-Mozilla-Status: 0001
X-Mozilla-Status2: 0080
Message-ID: <[EMAIL PROTECTED]>
Date: Mon, 10 Oct 2005 17:29:51 -0400
From: Bob Ababurko <[EMAIL PROTECTED]>
User-Agent: Mozilla Thunderbird 1.0.7 (Macintosh/20050923)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: OpenBSD Misc 
Subject: RAID cards in sparc64 hardware?
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hello-

in reading the thread about running pf on an ultra 5, I saw that people
were running fxp NICs in them.  I started thinking about the possibility
of running a Mylex Acceleraid 250 or any other RAID controller that
OpenBSD supports in an Ultra5.

I have been caught up in thinking that these nics and RAID controllers
needed to be run in i386 hardware.  So I just tested out my realtek
NICs, and they work in the sparc64, what about RAID controllers that I
have always associated with PC's?

-Bob



pf and linksys WRT55G not getting along

2005-10-16 Thread Bob Ababurko

Hello-

I am in the process of setting up my first pf box.  I am embarrassed to 
say that I am having trouble even getting past the networking portion of 
my network.  The box I am configuring is going to be between my cable 
modem and my wireless routerso this is where my issues are coming 
from.  I cannot seem to get the routers to talk to each other.  except 
in one instance which I talk about below.  Here is a diagram of the network:


Internet<> (-Cable Modem- 24-52-224-246)/ hme0 (-pf box-) 
rl0/192.168.1.1   <-> 192.168.1.2(-Linksys WRT55G-) 
192.168.69.1  .oO))  192.168.69.50(wireless client(MAC OS X))


Ok, I hope that this will help more than hinder.
* I can communicate to the Internet from the pf box.
* I cannot ping the outside interface of the linksys(192.168.1.2) from 
the pf box.
* I cannot ping the inside interface(192.168.1.1) of the pf box from the 
MAC OS X(192.168.69.50)
* I can ping the outside interface(192.168.1.2) of the linksys from the 
MAC OS X(192.168.69.50)

***so basically the two routers are not talking


-The pf box is set up with:

net.inet.ip.forwarding=1


-and in pf.conf:

pass in log all keep state
pass out log all keep state


It seems that the routing tables would be incorrect, but I _think_ they 
are ok.


***Routing table on _pf box_

/root $netstat -r
Routing tables

Internet:
DestinationGatewayFlags Refs UseMtu 
Interface

default24-52-224-gate.knt UGS 938937  -   hme0
24.52.224/23   link#1 UC  10  -   hme0
24-52-224-gate.knt 0:50:57:1:37:2 UHLc10  -   hme0
24-52-224-246.kntn localhost  UGHS00  33192   lo0
loopback   localhost  UGRS00  33192   lo0
localhost  localhost  UH  22  33192   lo0
192.168.1/24   link#2 UC  20  -   rl0
192.168.1.10:50:22:84:dc:6f   UHLc04  -   lo0
192.168.1.20:13:10:e:83:3cUHLc1  277  -   rl0
192.168.69/24  link#2 UCS 10  -   rl0
192.168.69.50  link#2 UHLc05  -   rl0
BASE-ADDRESS.MCAST localhost  URS 00  33192   lo0


**Notice that the MAC address of the linksys WRT55G(192.168.1.2) is 
in the routing table even though I cannot ping it.(Does this tell me 
something?)


**Also notice that I tried pinging my MAC OS X box(192.168.69.50) 
from the pf box before I pasted the output of netstat -r.  No success.




**Routing table on the Linksys WRT55G


Destination LAN IP  Subnet Mask Gateway Interface   
192.168.69.0255.255.255.0   0.0.0.0 LAN & Wireless  
192.168.1.0 255.255.255.0   0.0.0.0 WAN (Internet)  
0.0.0.0 0.0.0.0 192.168.1.1 WAN (Internet)

***The firewall is turned off on the Linksys router.  Will this router 
just route traffic and let everything pass?



One interesting thing.  I can connect to the pf box(192.168.1.1) from 
the MAC OS X(192.168.69.50) via ssh.  This connection takes a very long 
time to establish though.  Almost like it was a dns timeout but it is 
not.  I know this because I put this in the sshd_config of the pf box to 
make sure.UseDNS no.  I cannot ping or connect to anything one hop 
beyond the pf box out on the Internet rom the MAC OS X box.


Is there something _obvious_ here that I have not done?  or overlooking? 
 I really think that the linksys router is the thing that is odd here. 
 If it was a Cisco router, I think it would be much easier.  I cant 
even log on to the linksys and ping or traceroute anything.  If anyone 
has a suggestion, I would appreciate it.


-Bob



pf and linksys WRT55G not getting along

2005-10-16 Thread Bob Ababurko

Hello-

I am in the process of setting up my first pf box.  I am embarrassed to 
say that I am having trouble even getting past the networking portion of 
my network.  The box I am configuring is going to be between my cable 
modem and my wireless routerso this is where my issues are coming 
from.  I cannot seem to get the routers to talk to each other.  except 
in one instance which I talk about below.  Here is a diagram of the network:


Internet<> (-Cable Modem- 24-52-224-246)/ hme0 (-pf box-) 
rl0/192.168.1.1   <-> 192.168.1.2(-Linksys WRT55G-) 
192.168.69.1  .oO))  192.168.69.50(wireless client(MAC OS X))


Ok, I hope that this will help more than hinder.
* I can communicate to the Internet from the pf box.
* I cannot ping the outside interface of the linksys(192.168.1.2) from 
the pf box.
* I cannot ping the inside interface(192.168.1.1) of the pf box from the 
MAC OS X(192.168.69.50)
* I can ping the outside interface(192.168.1.2) of the linksys from the 
MAC OS X(192.168.69.50)

***so basically the two routers are not talking


-The pf box is set up with:

net.inet.ip.forwarding=1


-and in pf.conf:

pass in log all keep state
pass out log all keep state


It seems that the routing tables would be incorrect, but I _think_ they 
are ok.


***Routing table on _pf box_

/root $netstat -r
Routing tables

Internet:
DestinationGatewayFlags Refs UseMtu 
Interface

default24-52-224-gate.knt UGS 938937  -   hme0
24.52.224/23   link#1 UC  10  -   hme0
24-52-224-gate.knt 0:50:57:1:37:2 UHLc10  -   hme0
24-52-224-246.kntn localhost  UGHS00  33192   lo0
loopback   localhost  UGRS00  33192   lo0
localhost  localhost  UH  22  33192   lo0
192.168.1/24   link#2 UC  20  -   rl0
192.168.1.10:50:22:84:dc:6f   UHLc04  -   lo0
192.168.1.20:13:10:e:83:3cUHLc1  277  -   rl0
192.168.69/24  link#2 UCS 10  -   rl0
192.168.69.50  link#2 UHLc05  -   rl0
BASE-ADDRESS.MCAST localhost  URS 00  33192   lo0


**Notice that the MAC address of the linksys WRT55G(192.168.1.2) is 
in the routing table even though I cannot ping it.(Does this tell me 
something?)


**Also notice that I tried pinging my MAC OS X box(192.168.69.50) 
from the pf box before I pasted the output of netstat -r.  No success.




**Routing table on the Linksys WRT55G


Destination LAN IPSubnet MaskGatewayInterface
192.168.69.0255.255.255.00.0.0.0LAN & Wireless
192.168.1.0255.255.255.00.0.0.0WAN (Internet)
0.0.0.00.0.0.0192.168.1.1WAN (Internet)

***The firewall is turned off on the Linksys router.  Will this router 
just route traffic and let everything pass?



One interesting thing.  I can connect to the pf box(192.168.1.1) from 
the MAC OS X(192.168.69.50) via ssh.  This connection takes a very long 
time to establish though.  Almost like it was a dns timeout but it is 
not.  I know this because I put this in the sshd_config of the pf box to 
make sure.UseDNS no.  I cannot ping or connect to anything one hop 
beyond the pf box out on the Internet rom the MAC OS X box.


Is there something _obvious_ here that I have not done?  or overlooking? 
 I really think that the linksys router is the thing that is odd here. 
 If it was a Cisco router, I think it would be much easier.  I cant 
even log on to the linksys and ping or traceroute anything.  If anyone 
has a suggestion, I would appreciate it.


-Bob



Re: pf and linksys WRT55G not getting along

2005-10-17 Thread Bob Ababurko

Josh Webb wrote:
Unless you have a complex network with servers you want to keep in a 
DMZ, you don't need to link the routers the way you have. Having done 
the same thing not too long ago, here's what you'll probably want to do.


First, plug the cable modem into the Linksys and write down the DNS 
servers from the status page. There's a way to get them from the OBSD 
box, but I couldn't tell you how right off the top of my head.


Since the pf box will take care of the routing, you should plug its 
internal interface into the LAN switch on the Linksys. My Linksys is a 
diferent model (befw11s4), but I imagine yours does the same. If you 
ever have to do a full reset, it will default its internal IP address to 
192.168.1.1. To prevent it from confilcting with the pf box, set the 
internal interface on the pf box to 192.168.1.2. (The external one, of 
course, should be using DHCP). Go ahead and set the Linksys's internal 
IP address to 192.168.1.1 and turn off its DHCP server, the pf box can 
take care of that too.


Turn on the dhcp server on your pf box by editing rc.conf and replacing 
the dhcpd_flags's NO with opening and closing double quotes ("") Make 
sure you have also changed the NO to a YES on the pf entry.


Take a look at the example config files I attached.

After setting up your own dhcpd.conf and pf.conf, reboot the pf box.

Remember to either set the client system to use DHCP, or be sure to set 
its gateway to 192.168.1.2 and give it the DNS servers you wrote down 
before.


Also, be sure to read the PF User's Guide 
http://openbsd.org/faq/pf/index.html


And I would suggest "Absolute OpenBSD" as a good introduction. For a 
technical book, it's very readable. http://www.absoluteopenbsd.com/


Bob Ababurko wrote:


Hello-

I am in the process of setting up my first pf box.  I am embarrassed 
to say that I am having trouble even getting past the networking 
portion of my network.  The box I am configuring is going to be 
between my cable modem and my wireless routerso this is where my 
issues are coming from.  I cannot seem to get the routers to talk to 
each other.  except in one instance which I talk about below.  Here is 
a diagram of the network:


Internet<> (-Cable Modem- 24-52-224-246)/ hme0 (-pf box-) 
rl0/192.168.1.1   <-> 192.168.1.2(-Linksys WRT55G-) 
192.168.69.1  .oO))  192.168.69.50(wireless client(MAC OS X))


Ok, I hope that this will help more than hinder.
* I can communicate to the Internet from the pf box.
* I cannot ping the outside interface of the linksys(192.168.1.2) from 
the pf box.
* I cannot ping the inside interface(192.168.1.1) of the pf box from 
the MAC OS X(192.168.69.50)
* I can ping the outside interface(192.168.1.2) of the linksys from 
the MAC OS X(192.168.69.50)

***so basically the two routers are not talking


-The pf box is set up with:

net.inet.ip.forwarding=1


-and in pf.conf:

pass in log all keep state
pass out log all keep state


It seems that the routing tables would be incorrect, but I _think_ 
they are ok.


***Routing table on _pf box_

/root $netstat -r
Routing tables

Internet:
DestinationGatewayFlags Refs UseMtu 
Interface
default24-52-224-gate.knt UGS 938937  -   
hme0
24.52.224/23   link#1 UC  10  -   
hme0
24-52-224-gate.knt 0:50:57:1:37:2 UHLc10  -   
hme0

24-52-224-246.kntn localhost  UGHS00  33192   lo0
loopback   localhost  UGRS00  33192   lo0
localhost  localhost  UH  22  33192   lo0
192.168.1/24   link#2 UC  20  -   rl0
192.168.1.10:50:22:84:dc:6f   UHLc04  -   lo0
192.168.1.20:13:10:e:83:3cUHLc1  277  -   rl0
192.168.69/24  link#2 UCS 10  -   rl0
192.168.69.50  link#2 UHLc05  -   rl0
BASE-ADDRESS.MCAST localhost  URS 00  33192   lo0


**Notice that the MAC address of the linksys WRT55G(192.168.1.2) 
is in the routing table even though I cannot ping it.(Does this tell 
me something?)


**Also notice that I tried pinging my MAC OS X box(192.168.69.50) 
from the pf box before I pasted the output of netstat -r.  No success.




**Routing table on the Linksys WRT55G


Destination LAN IPSubnet MaskGatewayInterface
192.168.69.0255.255.255.00.0.0.0LAN & Wireless
192.168.1.0255.255.255.00.0.0.0WAN (Internet)
0.0.0.00.0.0.0192.168.1.1WAN (Internet)

***The firewall is turned off on the Linksys router.  Will this router 
just route traffic and let everything pass?



One interesting thing.  I can connect to the pf box(192.168.1.1) from 
the MAC OS X(192.168.69.50) via ssh.  This connection t

what am I missing? -sparc64

2005-11-01 Thread Bob Ababurko
I was excited to install the new 3.8 this morning and looking at all of 
the ftp servers I could log into, I did not find a sparc64 folder.  Is 
there something I skipped over or do not understand?  I see that this is 
on disc 3, but I am not in the position to buy this release today.


-B



Re: what am I missing? -sparc64

2005-11-01 Thread Bob Ababurko

Simon Dassow wrote:


On Tue, Nov 01, 2005 at 12:44:55PM -0500, Bob Ababurko wrote:
 

I was excited to install the new 3.8 this morning and looking at all of 
the ftp servers I could log into, I did not find a sparc64 folder.  Is 
there something I skipped over or do not understand?  I see that this is 
on disc 3, but I am not in the position to buy this release today.
   



3.8 is just released... check the mirrors close to you or wait until your
current one is synched.

Regards
Simon


 

I finally found the sparc64 boot image. 

I have to say that I love the no frills install of OpenBSD.  quick and 
easysuper.


peace,
/bob



Re: what am I missing? -sparc64

2005-11-01 Thread Bob Ababurko

Theo de Raadt wrote:


What mirror were you using?

Date: Tue, 01 Nov 2005 12:44:55 -0500
From: Bob Ababurko <[EMAIL PROTECTED]>
User-Agent: Mozilla Thunderbird 1.0.7 (Macintosh/20050923)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: misc@openbsd.org
Subject: what am I missing? -sparc64
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Loop: misc@openbsd.org
Precedence: list
Sender: [EMAIL PROTECTED]

I was excited to install the new 3.8 this morning and looking at all of 
the ftp servers I could log into, I did not find a sparc64 folder.  Is 
there something I skipped over or do not understand?  I see that this is 
on disc 3, but I am not in the position to buy this release today.


-B



 


ftp.cse.buffalo.edu but there were others just the same.

-Bob



Re: Chrooted apache with chrooted ftp - how users can upload websites now?

2005-11-04 Thread Bob Ababurko

Allie D wrote:

Read the FAQ..put the users home dirs in /var/www and setup anonyumous ftp yet 
define the users and it works well. BTW you don't need inetd, just run ftpd as 
a daemon.
Marcin Wilk([EMAIL PROTECTED])@Sat, Nov 05, 2005 at 02:04:18AM +0100:


Hello!
I was searching & i can't find answer.
I got OpenBSD 3.7 with default Apache (chrooted) & i'm using ftp 
server fdrom base system enabled by inetd.
I would like to make users not be able to read anything except their 
own /home/user folder & /var/www/users/user folder.

How can i do that with such configuration?
Is there any way to do that, or do i have to use some other FTP server?
If i have to use other ftp, what will give features that i need?

Best Regards




I use scponly for that exact purpose.  It is secure and you can chroot 
the user to their home directory.


-Bob



Re: Macppc G3 Powerbook - Install Fails

2005-11-15 Thread Bob Ababurko

Roy Morris wrote:
I have a buddy over who wants to put OpenBSD 3.8 on his macppc G3 
powerbook (bronze keyboard) we burn tested the boot cd on a G4 Powerbook 
and it does boot fine. When booting on the G3 none of the normal 
installation methods work, it just seems to go right

by the cd and boot into the mac os. Any ideas what we might be doing wrong?

Thanks!
Rm




If this is an oldworld (before circa 1988) you cannot boot from a cd. 
Google your model to see if it is.  Otherwise, you could try to boot the 
laptop while pressing cmd+opt+shift+delete to skip the first bootable 
deviceI believe it is something like that.


You may also look into the ramdisk booting method, if your machine will 
not boot off of a cd.


Good Luck,
bob



Re: I have $300

2005-11-28 Thread Bob Ababurko

Graham Toal wrote:


Depends if you're saying "embedded" because you need the form factor,
or just to keep the price low.  If the latter, you can get some
good deals on desktops if you look around.

I bought a nice Dell server for about $240 last year, leaving change
for a couple of extra ether cards.  1Gb cards are dirt cheap nowadays;
I got both of mine for about $30 at one of those weekend sales
from CompUSA and Office Max (very suprised about the latter).  Both
were on one-per-customer mailin rebates...

So I got an OpenBSD firewall/spamfilter *and* a server I could use
for backing up my PC out of the deal...  (Disk drive was 250Gb SATA
which was effectively free because I'd had one die on me earlier in
the year which I'ld already replaced, then for this server I sent
the dead one back to Maxtor who replaced it for free with a new one)

The server was on the Dell "small business" program.  Quite often near
the end of a quarter they'll dump stuff at or below cost just to bump
up their numbers for their quarterly report.  Obviously you need
patience to wait for one of these - they don't happen every day :-)

(Slightly related; I picked up a 200Gb Maxtor IDE drive in the
Black Friday sales for $30.  It'll sit waiting for the next
project.  Finally in rebellion for thirty years of paying through 
the nose for bleeding-edge early adopter prices, I've decided that

from now on I'll only buy loss-leader sale items as much as
I possibly can :-)  )


Graham


 

The biggest reason I was choosing to go embedded is that I wanted a 
system that did not have moving parts.  This was to hopefully extend the 
life of the machine and increase uptime by eliminating the hard drives 
and power supplies with moving parts.  I am not paying for power so I 
can say that I am not concerned about consumption at this point.  This 
is only due to the fact that $ is finite at the present time and cannot 
weigh heavily on the list of importance.


The alternative is to use a dual P3 that we have but I am still 
interested in optimum availibility.  Do I implement RAID 1 with two 
drives.OR does this create more problems that it is worth by 
introducing more parts to fail(two drives.  Do I implement a Flash card 
reader and install OpenBSD/pf on a compact flash drive?  I am not sure 
where I should be drawing the line...I mean do I pay attention to drive 
redundency or power redundencyor even actual firewall redundency? 

What is the most bang for the buck in terms of availibility short of a 
hot standby firewall configuration?




Re: I have $300

2005-11-30 Thread Bob Ababurko
I totally appreciate everybodies comments and I have in fact decided to
pass over the embedded solution.  We just picked up a Sun Netra T105
(440Mhz, 512MB)on ebay.  It was about $135 shipped and have two onboard
NIC's.  I have always like Sun hardware and it works well with OpenBSD,
it is some of the best in quality.  Fits in one rack unit and will be
cheap to grab another to do a failover when the time comes.  I can even
dd the drive to make a disk for the new unit when I implement it.

I understand that running two cheap ones is better than running one
solid state machine.  Plus the horsepower leaves little to work with in
some of these tiny contraptions(soekris comes to mind).  Not to say that
they do not have their place, but I feel that this is the best answer.

-Bob