OSPF ABR/ASBR issue
Hi misc, I've been playing with OSPF on OpenBSD and Cisco and there's something I can't get my head around. I hope someone is able to point my in the right direction. Let me first explain the setup; output of the devices follows at the end. I have a setup of two Cisco routers (IOS 12.4.25g) and one OpenBSD router (5.3 i386). All routers have an interface connected to area 0. The interfaces are defined as follows: router1: fa0/0, 10.0.0.1/24 router2: fa0/0, 10.0.0.2/24 soekris: sis1, 10.0.0.3/24 Each router also have a loopback interface: router1: lo1, 1.1.1.1 router2: lo1, 2.2.2.2 soekris: lo1, 3.3.3.3 On the "other" side of the routers I have defined a dedicated areafor each router: router1: area 0.0.0.1 router2: area 0.0.0.2 soekris: area 0.0.0.3 In the dedicated area I've added the following interface: router1: vlan101, 10.101.0.1/24 router2: vlan102, 10.102.0.1/24 soekris: sis2, 10.103.0.1/24 When I start ospfd, all routers are able to see each other. On soekris I'm also able to see the networks from the areas behind router1 and router2: soekris:~# ospfctl sh nei ID Pri StateDeadTime Address Iface Uptime 1.1.1.1 1 FULL/BCKUP 00:00:00 10.0.0.1 sis0 00:21:48 2.2.2.2 1 FULL/DR 00:00:00 10.0.0.2 sis0 00:21:43 soekris:~# ospfctl sh fib ospf flags: * = valid, O = OSPF, C = Connected, S = Static Flags Prio Destination Nexthop *O 32 1.1.1.1/32 10.0.0.1 *O 32 2.2.2.2/32 10.0.0.2 *O 32 10.0.0.0/24 10.0.0.3 *O 32 10.101.0.0/2410.0.0.1 *O 32 10.102.0.0/2410.0.0.2 However on the Cisco routers I'm not able to see the dedicated network behind soekris: router1#sh ip route ospf 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/2] via 10.0.0.2, 00:21:48, FastEthernet0/0 3.0.0.0/32 is subnetted, 1 subnets O 3.3.3.3 [110/11] via 10.0.0.3, 00:21:48, FastEthernet0/0 10.0.0.0/24 is subnetted, 3 subnets O IA10.102.0.0 [110/2] via 10.0.0.2, 00:21:48, FastEthernet0/0 When I add a secondary OpenBSD router (eeepc) behind soekris in area 0.0.0.3 (as a stub router) the networks in area 0.0.0.3 are shown on the Cisco routers (eeepc has 4.4.4.4 as loopback interface): router1#sh ip route ospf 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/2] via 10.0.0.2, 00:00:16, FastEthernet0/0 3.0.0.0/32 is subnetted, 1 subnets O 3.3.3.3 [110/11] via 10.0.0.3, 00:00:16, FastEthernet0/0 4.0.0.0/32 is subnetted, 1 subnets O IA4.4.4.4 [110/21] via 10.0.0.3, 00:00:06, FastEthernet0/0 10.0.0.0/24 is subnetted, 4 subnets O IA10.102.0.0 [110/2] via 10.0.0.2, 00:00:16, FastEthernet0/0 O IA10.103.0.0 [110/11] via 10.0.0.3, 00:00:16, FastEthernet0/0 I've seen on the Cisco routers the following that might point to the cause of the issue(?) When eeepc is not active the Cisco router shows soekris as "ASBR": router1#sh ip ospf border-routers OSPF Process 1 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 2.2.2.2 [1] via 10.0.0.2, FastEthernet0/0, ABR, Area 0, SPF 37 i 3.3.3.3 [1] via 10.0.0.3, FastEthernet0/0, ASBR, Area 0, SPF 37 When eeepc is active the Cisco shows soekris as "ASR/ASBR" and routes from area 0.0.0.3 are available on the Cisco routers: router1#sh ip ospf border-routers OSPF Process 1 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 2.2.2.2 [1] via 10.0.0.2, FastEthernet0/0, ABR, Area 0, SPF 36 i 3.3.3.3 [1] via 10.0.0.3, FastEthernet0/0, ABR/ASBR, Area 0, SPF 36 So, now my question is: how can I get soekris to be seen as an ABR without using eeepc? Is it because the Cisco routers see soekris as an ASBR that they don't add 10.103.0.0/24 and 4.4.4.4/32 to their routing table? I also played with the rfc1583 compatibility mode but without luck. Anybody have a clue how to solve this? Please let me know if you need any other output. Thanks in advance, Stijn Here's the output of the ospf config and interfaces. router1: router ospf 1 router-id 1.1.1.1 no compatible rfc1583 log-adjacency-changes passive-interface Vlan101 network 1.1.1.1 0.0.0.0 area 0 network 10.0.0.0 0.0.0.255 area 0 network 10.101.0.0 0.0.0.255 area 1 interface FastEthernet0/0 ip address 10.0.0.1 255.255.255.0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 7 130A04020D5C ip ospf dead-interval minimal hello-multiplier 5 duplex auto speed auto end router2: router ospf 1 router-id 2.2.2.2 no compatible rfc1583 log-adjacency-changes passive-interface Vlan102 network 2.2.2.2 0.0.0.0 area 0 network 10.0.0.0 0.0.0.255 area 0 network 10.1.0.0 0.0.0.255 area 0 network 10.102.0.0 0.0.0.255 area 2 interface FastEthernet0/0 ip address 10.0.0.2 255.255.255.0 ip ospf authentication me
Re: OSPF ABR/ASBR issue
On 31/05/2013 10:33, Kapetanakis Giannis wrote: On 31/05/13 00:51, Stijn wrote: Hi misc, I've been playing with OSPF on OpenBSD and Cisco and there's something I can't get my head around. I hope someone is able to point my in the right direction. Let me first explain the setup; output of the devices follows at the end. I have a setup of two Cisco routers (IOS 12.4.25g) and one OpenBSD router (5.3 i386). All routers have an interface connected to area 0. The interfaces are defined as follows: router1: fa0/0, 10.0.0.1/24 router2: fa0/0, 10.0.0.2/24 soekris: sis1, 10.0.0.3/24 Each router also have a loopback interface: router1: lo1, 1.1.1.1 router2: lo1, 2.2.2.2 soekris: lo1, 3.3.3.3 On the "other" side of the routers I have defined a dedicated areafor each router: router1: area 0.0.0.1 router2: area 0.0.0.2 soekris: area 0.0.0.3 In the dedicated area I've added the following interface: router1: vlan101, 10.101.0.1/24 router2: vlan102, 10.102.0.1/24 soekris: sis2, 10.103.0.1/24 When I start ospfd, all routers are able to see each other. On soekris I'm also able to see the networks from the areas behind router1 and router2: soekris:~# ospfctl sh nei ID Pri StateDeadTime Address Iface Uptime 1.1.1.1 1 FULL/BCKUP 00:00:00 10.0.0.1 sis0 00:21:48 2.2.2.2 1 FULL/DR 00:00:00 10.0.0.2 sis0 00:21:43 soekris:~# ospfctl sh fib ospf flags: * = valid, O = OSPF, C = Connected, S = Static Flags Prio Destination Nexthop *O 32 1.1.1.1/32 10.0.0.1 *O 32 2.2.2.2/32 10.0.0.2 *O 32 10.0.0.0/24 10.0.0.3 *O 32 10.101.0.0/2410.0.0.1 *O 32 10.102.0.0/2410.0.0.2 However on the Cisco routers I'm not able to see the dedicated network behind soekris: router1#sh ip route ospf 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/2] via 10.0.0.2, 00:21:48, FastEthernet0/0 3.0.0.0/32 is subnetted, 1 subnets O 3.3.3.3 [110/11] via 10.0.0.3, 00:21:48, FastEthernet0/0 10.0.0.0/24 is subnetted, 3 subnets O IA10.102.0.0 [110/2] via 10.0.0.2, 00:21:48, FastEthernet0/0 When I add a secondary OpenBSD router (eeepc) behind soekris in area 0.0.0.3 (as a stub router) the networks in area 0.0.0.3 are shown on the Cisco routers (eeepc has 4.4.4.4 as loopback interface): router1#sh ip route ospf 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/2] via 10.0.0.2, 00:00:16, FastEthernet0/0 3.0.0.0/32 is subnetted, 1 subnets O 3.3.3.3 [110/11] via 10.0.0.3, 00:00:16, FastEthernet0/0 4.0.0.0/32 is subnetted, 1 subnets O IA4.4.4.4 [110/21] via 10.0.0.3, 00:00:06, FastEthernet0/0 10.0.0.0/24 is subnetted, 4 subnets O IA10.102.0.0 [110/2] via 10.0.0.2, 00:00:16, FastEthernet0/0 O IA10.103.0.0 [110/11] via 10.0.0.3, 00:00:16, FastEthernet0/0 I've seen on the Cisco routers the following that might point to the cause of the issue(?) When eeepc is not active the Cisco router shows soekris as "ASBR": router1#sh ip ospf border-routers OSPF Process 1 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 2.2.2.2 [1] via 10.0.0.2, FastEthernet0/0, ABR, Area 0, SPF 37 i 3.3.3.3 [1] via 10.0.0.3, FastEthernet0/0, ASBR, Area 0, SPF 37 When eeepc is active the Cisco shows soekris as "ASR/ASBR" and routes from area 0.0.0.3 are available on the Cisco routers: router1#sh ip ospf border-routers OSPF Process 1 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 2.2.2.2 [1] via 10.0.0.2, FastEthernet0/0, ABR, Area 0, SPF 36 i 3.3.3.3 [1] via 10.0.0.3, FastEthernet0/0, ABR/ASBR, Area 0, SPF 36 So, now my question is: how can I get soekris to be seen as an ABR without using eeepc? Is it because the Cisco routers see soekris as an ASBR that they don't add 10.103.0.0/24 and 4.4.4.4/32 to their routing table? I also played with the rfc1583 compatibility mode but without luck. Anybody have a clue how to solve this? Please let me know if you need any other output. Thanks in advance, Stijn Here's the output of the ospf config and interfaces. router1: router ospf 1 router-id 1.1.1.1 no compatible rfc1583 log-adjacency-changes passive-interface Vlan101 network 1.1.1.1 0.0.0.0 area 0 network 10.0.0.0 0.0.0.255 area 0 network 10.101.0.0 0.0.0.255 area 1 interface FastEthernet0/0 ip address 10.0.0.1 255.255.255.0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 7 130A04020D5C ip ospf dead-interval minimal hello-multiplier 5 duplex auto speed auto end router2: router ospf 1 router-id 2.2.2.2 no compatible rfc1583 log-adjacency-changes passive-interface Vlan102 network 2.2.2.2 0.0.0.0 area 0 network 10.0.0.0 0.0.0.255 area 0 network 10.1.0.0 0.0.0.255 area 0 network 10.102.0.0 0.0.0.255 area 2 interface
Re: OSPF ABR/ASBR issue
On 5/06/2013 0:16, Claudio Jeker wrote: On Mon, Jun 03, 2013 at 03:43:21PM +0300, Kapetanakis Giannis wrote: On 01/06/13 18:44, Claudio Jeker wrote: Can you give this diff a spin? Not much tested but the current way we define an area as active (having at least one active neighbor) is wrong. This changes the decision to have at least one active interface (not IF_STA_DOWN). Not sure if that will cause troubles with passive interfaces since those are not considered active. At least it seems that RFC 3509 uses this to define active areas. Thanks Just tested this diff and it does not work in my case for passive interfaces (either carp or loopback). area 0.0.0.7 { stub interface carp8 {passive} interface lo1 {passive} } If I add carp8 or lo1 in area 0.0.0.0 then the routes are announced. Yeah, while the diff fixed the B flag it did not solve the problem that we skipped our own networks. This version should solve that (at least it does in my quick test). Needs lots of testing since this changes core parts of the route calculation. Hi Claudio, I tried your second patch as well. Initially it looks well. When soekris is the only OSPF router in area 0.0.0.3, the connected network in area 0.0.0.3 is announced properly on the Cisco router. However, when I add eeepc in area 0.0.0.3 the route remains announced, BUT it's removed as soon as I stop ospfd on eeepc. Doing a "ospfctl reload" on soekris brings it back in the initial state (route is announced on Cisco router). Also when I disconnect sis2 on soekris (interface in area 0.0.0.3), soekris is shown as an "ASBR" router on the Cisco router. Plugging sis2 back in makes the state again "ABR/ASBR" (and also gets the connected network in area 0.0.0.3 back in the routing table). Looking promising. G, Stijn
Re: OSPF ABR/ASBR issue
On 24/09/2013 11:58, Kapetanakis Giannis wrote: On 24/09/13 12:24, mxb wrote: I'v seen this issue, but it just magically disappeared then I re-configured ospfd and restarted on both ends. I had an issue to see routes from area 0.0.0.0 on area 0.0.0.78. Host A: area 0.0.0.0 { interface vether0 { metric 5 } interface vether1 { metric 5 } } area 0.0.0.78 { interface vether2 { metric 10 ……. } interface carp1 { passive } interface carp2 { passive } interface lo1 { metric 5 } interface vic2 { metric 10 } } Host B: area 0.0.0.78 { interface vether2 { metric 10 ……. } } Host A is: OpenBSD 5.4 (GENERIC.MP) #34: Sun Jul 21 22:07:08 MDT 2013 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP Host B is: OpenBSD 5.3 (GENERIC) #53: Tue Mar 12 18:15:44 MDT 2013 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC As you can see, this setup works without any patch. I tested to remove lo1 and see if routes to carped nets disappear. No luck. Routes are there. //mxb On 24 sep 2013, at 11:08, Kapetanakis Giannis wrote: On 24/09/13 12:02, Kapetanakis Giannis wrote: Without this patch, routes to (lo2) and carpX:network where not distributed. regards, G My e-mail client somehow f@cked up Claudio's patch, Here is the link to hist original post http://marc.info/?l=openbsd-misc&m=137038436926946&w=2 G I think I'm talking about a different setup than yours. Cisco1 --- [area: 0.0.0.0] --- [OBSD] --- [area: 0.0.0.7] Cisco does not learn routes from 0.0.0.7 which are only local on OBSD (VLANs, carp, loopback etc). If the setup is Cisco1 --- [area: 0.0.0.0] --- [OBSD] --- [area: 0.0.0.7] --- Cisco2 Then Cisco1 learns the routes from 0.0.0.7. I guess they come from Cisco2. G With the last patch (05/06/13) I tested from Claudio, area 0.0.0.7 was announced in area 0.0.0.0 (using your first setup). Adding another OSD router (instead of Cisco2 in your second setup) also worked, however when I stopped OSPF on this second OBSD router area 0.0.0.7 was not announced anymore. Restarting the OSPF process on the first OBSD router brought area 0.0.0.7 back in. So Cisco1 learns the routes from the first OBSD router; not the Cisco2 (IIRC that isn't possible unless you have a virtual link from Cisco2 to Cisco1). HTH, Stijn
Re: Cellular network modems
On 11/11/2013 22:22, patrick keshishian wrote: Greetings, Saw this semi-related post[1], posting separately not to hijack it. Searching marc.info for "cellular modem" on misc@ archives finds mostly old, and posts about using mobile phones as cellular modems. Are there standalone cellular modem devices known to work with OpenBSD? Multi-Tech's QuickCarrier USB-D[2] caught my attention. --patrick [1] http://marc.info/?l=openbsd-misc&m=138419004519701&w=2 [2] http://www.multitech.com/en_US/PRODUCTS/Families/QuickCarrierUSBD/ Not OpenBSD per se, but I've been using the following Huawei device (via wifi) with great success: http://consumer.huawei.com/en/portable-internet/mobile-wifi/tech-specs/e5220-en.htm Basically it sets up a wireless hotspot so as long as your device has a wireless NIC you can have 3G connectivity. FYI, I just tried to see if USB tethering is working on this device but with no luck. Looks like the device ID is unknown(?) Anyway, dmesg and the "usbdevs -dv" output are available below. I also disconnected and reconnected the device so you can see what it spits out on the console. HTH, Stijn --- dmesg OpenBSD 5.4 (GENERIC) #37: Tue Jul 30 12:05:01 MDT 2013 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R) Celeron(R) M processor 900MHz ("GenuineIntel" 686-class) 901 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE,NXE,PERF real mem = 1064366080 (1015MB) avail mem = 1035530240 (987MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 09/11/08, BIOS32 rev. 0 @ 0xf0010, SMBIOS rev. 2.5 @ 0xf06f0 (37 entries) bios0: vendor American Megatrends Inc. version "0906" date 09/11/2008 bios0: ASUSTeK Computer INC. 900 acpi0 at bios0: rev 0 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC OEMB MCFG acpi0: wakeup devices P0P3(S4) P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) MC97(S4) USB1(S3) USB2(S3) USB3(S3) USB4(S3) EUSB(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 100MHz ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0xe000, bus 0-255 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 5 (P0P3) acpiprt2 at acpi0: bus 3 (P0P5) acpiprt3 at acpi0: bus 1 (P0P6) acpiec0 at acpi0 acpicpu0 at acpi0: C3, C2 acpitz0 at acpi0: critical temperature is 90 degC acpibat0 at acpi0: BAT0 model "900" serial type LION oem "ASUS" acpiac0 at acpi0: AC unit online acpiasus0 at acpi0 acpibtn0 at acpi0: LID_ acpibtn1 at acpi0: SLPB acpibtn2 at acpi0: PWRB bios0: ROM list: 0xc/0xf800! pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 "Intel 82915GM Host" rev 0x04 vga1 at pci0 dev 2 function 0 "Intel 82915GM Video" rev 0x04 intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1 drm0 at inteldrm0 inteldrm0: 1024x600 wsdisplay0 at vga1 mux 1: console (std, vt100 emulation) wsdisplay0: screen 1-5 added (std, vt100 emulation) "Intel 82915GM Video" rev 0x04 at pci0 dev 2 function 1 not configured azalia0 at pci0 dev 27 function 0 "Intel 82801FB HD Audio" rev 0x04: msi azalia0: codecs: Realtek ALC662 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 "Intel 82801FB PCIE" rev 0x04: apic 1 int 16 pci1 at ppb0 bus 4 ppb1 at pci0 dev 28 function 1 "Intel 82801FB PCIE" rev 0x04: apic 1 int 17 pci2 at ppb1 bus 3 lii0 at pci2 dev 0 function 0 "Attansic Technology L2" rev 0xa0: apic 1 int 17, address 00:22:15:22:f5:9e atphy0 at lii0 phy 1: F2 10/100 PHY, rev. 2 ppb2 at pci0 dev 28 function 2 "Intel 82801FB PCIE" rev 0x04: apic 1 int 18 pci3 at ppb2 bus 1 uhci0 at pci0 dev 29 function 0 "Intel 82801FB USB" rev 0x04: apic 1 int 23 uhci1 at pci0 dev 29 function 1 "Intel 82801FB USB" rev 0x04: apic 1 int 19 uhci2 at pci0 dev 29 function 2 "Intel 82801FB USB" rev 0x04: apic 1 int 18 uhci3 at pci0 dev 29 function 3 "Intel 82801FB USB" rev 0x04: apic 1 int 16 ehci0 at pci0 dev 29 function 7 "Intel 82801FB USB" rev 0x04: apic 1 int 23 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 ppb3 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xd4 pci4 at ppb3 bus 5 ichpcib0 at pci0 dev 31 function 0 "Intel 82801FBM LPC" rev 0x04: PM disabled pciide0 at pci0 dev 31 function 2 "Intel 82801FBM SATA" rev 0x04: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 1 drive 0: wd0: 1-sector PIO, LBA, 3847MB, 7880544 sectors wd1 at pciide0 channel 1 drive 1: wd1: 1-sector PIO, LBA, 7695MB, 15761088 sectors wd0(pciide0:1:0): using PIO mode 4, Ultra-DMA m
Re: I can't connect to Internet
Mnlcrrsc wrote: Hi. I just installed Openbsd 4.4 and my first problem is that i can't connect to Internet for downloading packages. My configuration is perfectly configured, so i don't know what it is (i already have configured a Debian and a Windows system). My configuration is 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS "208.67.222.222 208.67.220.220" (opendns). I write: export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/ and then: pkg_add kde (for example), but it says "no packages available". What could i do? Thank you very much for your help. export pkg_path=ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/ ----^ HTH, Stijn
Re: prices of cdset in eu
On 3/03/2014 22:59, Peter N. M. Hansteen wrote: Axel Scheepers writes: Can anyone tell me about the difference in price regarding a cdset in EU? original ca $50 36.41 (CA) mensys eur 50,- vat incl. 60.50 (NL) comcol.nl same as mensys, 60,50 (NL) getdigital(de)39,00 (DE) lehmanns media39,95 (DE) My guess is that the differences between the EU outlets comes in apart at least from the size of batches they order -- larger orders get discounts. I've tended to order from the CA one unless early copies have turned up at a conference I've been to and I hadn't gotten around to order yet. And I suppose there is a better range T-shirts and other related mercandise if you order from there. I've had a few of the packages from Canada stopped for extra customs inspection (with an aditional fee, of course), but it's been a while since that happened. That in turn could mean the Norwegian customs organization are actually learning to spend their resources wisely. - Peter Looks like those customs guys moved to Belgium... :( I never had issues with customs before until now. Now they want to charge me 86€ on taxes on a shipment of 240€! Though luck guys, I'm not paying that. I rather send 86€ to the project so I'm sure the money is used for something useful. PS: For those ordering stuff in the Computer Shop from Belgium: keep the total cost below 150€. Below 150€ they "only" charge you 12€ for "administrative costs" + 21% VAT on the whole package price (or they don't charge you at whole like I had with all my previous shipments). For shipments above 150€ (first time for me) they charge you 30€ +21% VAT. HTH, Stijn
Re: prices of cdset in eu
On 6/03/2014 22:52, Ingo Schwarze wrote: Hi, as you are in Europe, you might also consider this online shop: http://openbsdeurope.com/ It's not associated with the project, but so far worked reliably for me. Shipping to Germany, they charged me 39.75 Pound Sterling including Taxes and shipping for one 5.4 CD, which ended up as 46.76 Euro grand total on my credit card including bank fees. That seemed more or less reasonable to me. It doubt it will be much different in Belgium, given that Germany and Belgium are both in the EU. Of course, an additional donation using the usual channels is always welcome. :-) Yours, Ingo Yeah, I know about them, but they didn't had the 2.x CD's I was still lacking... G, Stijn
Re: How to find my USB?
Juan Jimenez Galdos wrote: The USB DISK PRO is working but i have another USB (is sd5 FAT32), an i have this problem: when i write "mount -t msdos /dev/sd5i /mnt/usb2" or "mount /dev/sd5i /mnt/usb2" it says "mount_ffs: /dev/sd5h on /mnt/usb2: No such file or directory (i haven't mounted anything). Is sd5 too. Somebody could help me? Thank you very much again. I am already using PKG_CACHE, and it works. PD: I have sent this to the misc list. http://openbsd.org/faq/faq14.html#foreignfs What's the output of "disklabel sd5"? What's the output of "ls -aF /mnt"? BR, Stijn
Re: Problem with MP on 4.2
Brian, Abdul snipped a piece of my mail. To disable apm just do: ukc> disable apm ukc> quit BR, Stijn Brian A Seklecki (Mobile) wrote: first try to enable acpi and see what happens. Thanks. Enabling acpi did not make a difference, but then I disabled apm and it's working. Right -- all of the example ukc> output shows how to enable acpi0 but no one ever shows how to disable apm0. ~BAS Abdul HTH, Stijn
Re: Inspiron 1501 azalia garbled/slow audio
Stu, The man page states it could cause overheating on *some* machines. I've been running an acpi-enabled kernel for some time without any problem on my Dell D620. You need to compile a custom kernel for acpitz, acpicpu, etc to get it to work. I enabled following entries in the GENERIC kernel: option ACPIVERBOSE option ACPI_ENABLE acpi0 at mainbus? acpitimer* at acpi? acpihpet* at acpi? acpiac* at acpi? acpibat*at acpi? acpibtn*at acpi? acpicpu*at acpi? acpidock* at acpi? acpiec* at acpi? acpiprt*at acpi? acpitz* at acpi? This enables you to monitor some sensors: $ sysctl -a hw.sensors hw.sensors.acpitz0.temp0=45.55 degC (zone temperature) hw.sensors.acpiac0.indicator0=On (power supply) hw.sensors.acpibat0.volt0=11.10 VDC (voltage) hw.sensors.acpibat0.volt1=12.18 VDC (current voltage) hw.sensors.acpibat0.amphour0=3.64 Ah (last full capacity) hw.sensors.acpibat0.amphour1=0.52 Ah (warning capacity) hw.sensors.acpibat0.amphour2=0.16 Ah (low capacity) hw.sensors.acpibat0.amphour3=1.44 Ah (remaining capacity), OK hw.sensors.acpibat0.raw0=2 (battery charging), OK hw.sensors.acpibat0.raw1=2367 (rate) hw.sensors.acpidock0.indicator0=Off (not docked) hw.sensors.cpu0.temp0=45.00 deg Only problem I have currently, the acpiac0.indicator0 status doesn't change when I (un)plug the power cable. I'm currently running: $ uname -a OpenBSD bender.localnet 4.2 GENERIC.MP#1 i386 HTH, Stijn Stuart Shillington wrote: Hello, I've got an Inspiron 1501, and under 4.2/AMD64 when attempting to play audio I get garbled/repeated/slow audio, using mpg321 and cat blah.au > /dev/sound. With and without ACPI, with GENERIC & GENERIC.MP. The built in volume-keys even work. Chipset is ATI RS485M / SB600. Incidently, I noticed a) the warning in about overheating in the acpi(4) man page, and b)that the acpitz/acpicpu said not configured. Should I be worried? (I guess it didn't melt down when compiling the kernel...) I hope I didn't miss something obvious... Thanks, Stu dmesg /w AZALIA_DEBUG enabled, audioctl, and mixerctl follows yeah I shouldn't be running as root... OpenBSD 4.2 (GENERIC) #0: Sat Oct 27 17:44:11 EDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 937480192 (894MB) avail mem = 898486272 (856MB) User Kernel Config UKC> enable aci UKC> enable acpi 263 acpi0 enabled UKC> quit Continuing... mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf0420 (37 entries) bios0: vendor Dell Inc. version "2.6.1" date 08/23/2006 bios0: Dell Inc. Inspiron 1501 acpi0 at mainbus0: rev 0 acpi0: tables DSDT FACP TCPA SSDT APIC MCFG HPET SLIC acpitimer at acpi0 not configured acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 0 (PB2_) acpiprt2 at acpi0: bus 0 (PB3_) acpiprt3 at acpi0: bus 2 (PB5_) acpiprt4 at acpi0: bus 5 (PB6_) acpiprt5 at acpi0: bus 8 (P2P_) acpiprt6 at acpi0: bus 1 (AGP_) acpiec at acpi0 not configured acpicpu at acpi0 not configured acpicpu at acpi0 not configured acpitz at acpi0 not configured acpibtn at acpi0 not configured acpibtn at acpi0 not configured acpibtn at acpi0 not configured acpiac at acpi0 not configured acpibat at acpi0 not configured cpu0 at mainbus0: (uniprocessor) cpu0: AMD Athlon(tm) 64 X2 Dual-Core Processor TK-55, 1795.74 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 256KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: PowerNow! K8 1795 MHz: speeds: 1800 1600 800 MHz pci0 at mainbus0 bus 0: configuration mode 1 pchb0 at pci0 dev 0 function 0 "ATI RS480 Host" rev 0x10 ppb0 at pci0 dev 1 function 0 "ATI RS480 PCIE" rev 0x00 pci1 at ppb0 bus 1 vga1 at pci1 dev 5 function 0 "ATI Radeon XPRESS 200M" rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) ppb1 at pci0 dev 5 function 0 "ATI RS480 PCIE" rev 0x00 pci2 at ppb1 bus 2 ppb2 at pci0 dev 6 function 0 "ATI RX480 PCIE" rev 0x00 pci3 at ppb2 bus 5 "Broadcom BCM4311" rev 0x01 at pci3 dev 0 function 0 not configured pciide0 at pci0 dev 18 function 0 "ATI IXP600 SATA" rev 0x00: DMA (unsupported), channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide0: using irq 11 for native-PCI interrupt wd0 at pciide0 channel 0 drive 0: wd0: 16-sector PIO, LBA48, 114473MB, 234441648 sectors pciide0: channel 1 ignored (not responding; disabled or no drives?) ohci0 at pci0 dev 19 function 0 "ATI IXP600 USB" rev 0x00: irq 11, version 1.0, legacy support ohci1 at pci0 dev 19 function 1 "AT
Re: [i386/Thinkpad T41]USB mouse + Xorg obsd 4.1
What's your "ServerLayout" section? I have this in my section "ServerLayout": ---8<--- InputDevice "Mouse1" "CorePointer" ---8<--- HTH, Stijn Mark Thomas wrote: I'm trying to get a USB mouse to work in X. obsd 4.1 recognizes the mouse as soon as I plug it in ( see dmesg output below ) as wsmouse1(?). When I add that as Mouse1 in the xorg.conf file it does not work. everything else works great! ( relevant dmesg output ) uhidev0 at uhub1 port 2 configuration 1 interface 0 uhidev0: Microsoft Microsoft Optical Mouse with Tilt Wheel, rev 2.00/1.20, addr 2, iclass 3/1 uhidev0: 24 report ids ums0 at uhidev0 reportid 17: 3 buttons and Z dir. wsmouse1 at ums0 mux 0 uhid0 at uhidev0 reportid 18: input=0, output=0, feature=1 uhid1 at uhidev0 reportid 19: input=1, output=0, feature=0 uhid2 at uhidev0 reportid 23: input=0, output=0, feature=1 uhid3 at uhidev0 reportid 24: input=0, output=0, feature=1 ( xorg.conf / InputDevice section) Section "InputDevice" Identifier "Mouse0" Driver "mouse" Option "Protocol" "wsmouse" Option "Device" "/dev/wsmouse" Option "ZAxisMapping" "4 5 6 7" EndSection Section "InputDevice" Identifier "Mouse1" Driver "mouse" Option "Protocol" "wsmouse" Option "Device" "/dev/wsmouse1" Option "ZAxisMapping" "4 5" EndSection thanks
Re: OpenBSD poster
Wow cool drawing... Is that SSDRAM? Edd Barrett wrote: On Sun, Mar 02, 2008 at 01:36:28PM +0100, Karel Kulhavy wrote: I have made an OpenBSD promotion poster. http://images.twibright.com/tns/21a8.html Which reminds me, a birthday card my housemate drew for me: http://students.dec.bmth.ac.uk/ebarrett/files/obsdcard.jpg
Re: is it ok for /bsd to be a symlink to /bsd.4.2-stable.2008mar07 (or whatever)?
Hi Jonathan, There's at least one problem: if you do an *upgrade* of your system the copy of the new /bsd binary will fail. BR, Stijn Jonathan Thornburg wrote: When following -stable, my practice is to name each kernel according to the current date, then have /bsd, /bsd.ok, /bsd.old, and /bsd.release be symlinks to the appropriate files. (/bsd is the kernel for normal system operation; /bsd.ok or /bsd.old are backups in case something goes wrong with a newly-installed kernel.) Thus, for example, the kernels in the root directory of my laptop right now are: # cd / # ls -lF bsd* lrwxr-xr-x 1 root wheel 24 Mar 7 17:56 bsd@ -> bsd.4.2-stable.2008mar07 -rw-r--r-- 1 root wheel 6229740 Oct 10 16:14 bsd.4.2-release -rwxr-xr-x 1 root wheel 6229740 Dec 7 14:30 bsd.4.2-stable.2007dec07* -rwxr-xr-x 1 root wheel 6229772 Nov 7 18:04 bsd.4.2-stable.2007nov07* -rwxr-xr-x 1 root wheel 6229772 Nov 17 10:42 bsd.4.2-stable.2007nov17* -rwxr-xr-x 1 root wheel 6229804 Feb 6 13:17 bsd.4.2-stable.2008feb06* -rwxr-xr-x 1 root wheel 6229804 Feb 14 20:51 bsd.4.2-stable.2008feb13* -rwxr-xr-x 1 root wheel 6229740 Mar 7 17:01 bsd.4.2-stable.2008mar07* -rw-r--r-- 1 root wheel 6277122 Oct 10 16:14 bsd.mp lrwxr-xr-x 1 root wheel 24 Feb 14 20:54 bsd.ok@ -> bsd.4.2-stable.2008feb13 lrwxr-xr-x 1 root wheel 24 Dec 8 14:18 bsd.old@ -> bsd.4.2-stable.2007dec07 -rw-r--r-- 1 root wheel 5068775 Oct 10 16:14 bsd.rd lrwxr-xr-x 1 root wheel 15 Dec 8 14:18 bsd.release@ -> bsd.4.2-release # (I could delete some of the older kernels, but in practice they don't take enough disk space to be a problem, so I don't bother. I normally do a fresh install with each new release, so that limits the cruft to at most 6 months anyway.) My question is, assuming I keep my root partition suitably close to the beginning of the disk (as per FAQ 14.7), is there any problem with having /bsd be a symlink pointing to another file in the root partition? If the answer is arch-dependent, I'm using i386, though I'm still interested in the situation for other architectures too. I have been using symlinks this way for some years (I'm sure back to OpenBSD 3.3, and maybe back as far as 2.8 or so) and have not had any problems. On the other hand, I haven't found any statement in 'man boot' or the FAQ about symlinks being ok, so a confirmation that it's ok (or a heads-up if there be daemons lurking) would be welcome. thanks,
Re: Tunnel snmp through ssh
check out ssh-based vpn: ssh (1) BR, Stijn Chris Cohen wrote: Hello list, is it possible to tunnel snmp through ssh? >From what I've found on the web openssh can't tunnel udp. Just want to collect snmp data from ~10 hosts all over my network without having snmp listen on an public available ip address. -- Thank you Chris
Java 1.5 issue - lazy binding
Hi, I've built Java 1.5 as explained on: "http://openbsd.org/faq/faq13.html#javaplugin"; After the "make install" I created the symbolic link to use the Java-plugin in firefox. "ln -s /usr/local/jdk-1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so \ /home/stijn/.mozilla/plugins" After I start firefox and enter "about:plugins", firefox becomes unresponsive. On my xterm console I get the error message: "/usr/local/mozilla-firefox/firefox-bin:/usr/local/jdk-1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so: undefined symbol '__cxa_atexit' lazy binding failed!" When I remove the symbolic link firefox works fine. Entering "about:plugins" returns information about installed plugins. Anybody knows how to fix this? I have no idea what the lazy binding means. TIA, Stijn firefox version: Mozilla Firefox 2.0.0.6, dmesg (sorry if my web mail messed up the format): OpenBSD 4.2-current (GENERIC.MP) #258: Tue Sep 11 21:42:19 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz ("GenuineIntel" 686-class) 1.67 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR real mem = 1063354368 (1014MB) avail mem = 1020440576 (973MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 04/03/07, BIOS32 rev. 0 @ 0xffa10, SMBIOS rev. 2.4 @ 0xf6ea0 (62 entries) bios0: vendor Dell Inc. version "A08" date 04/03/2007 bios0: Dell Inc. Latitude D620 pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfa990/224 (12 entries) pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371 ISA and IDE" rev 0x00) pcibios0: PCI bus #12 is the last bus bios0: ROM list: 0xc/0xf000! 0xcf000/0x1000 acpi0 at mainbus0: rev 0 acpi0: tables DSDT FACP HPET APIC ASF! MCFG SLIC TCPA SSDT acpitimer at acpi0 not configured acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 166 MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz ("GenuineIntel" 686-class) 1.67 GHz cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 2 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (AGP_) acpiprt2 at acpi0: bus 3 (PCIE) acpiprt3 at acpi0: bus 11 (RP01) acpiprt4 at acpi0: bus 12 (RP02) acpiprt5 at acpi0: bus 9 (PXP0) acpiprt6 at acpi0: bus -1 (RP04) acpiprt7 at acpi0: bus -1 (RP05) acpiprt8 at acpi0: bus -1 (RP06) acpicpu at acpi0 not configured acpicpu at acpi0 not configured acpitz at acpi0 not configured acpiac at acpi0 not configured acpibat at acpi0 not configured acpibat at acpi0 not configured acpibtn at acpi0 not configured acpibtn at acpi0 not configured acpibtn at acpi0 not configured acpidock at acpi0 not configured cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130a2506000a25 cpu0: using only highest and lowest power states cpu0: Enhanced SpeedStep 1667 MHz (1292 mV): speeds: 1667, 1000 MHz pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 "Intel 82945GM MCH" rev 0x03 vga1 at pci0 dev 2 function 0 "Intel 82945GM Video" rev 0x03: aperture at 0xd000, size 0x1000 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) "Intel 82945GM Video" rev 0x03 at pci0 dev 2 function 1 not configured azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x01: apic 2 int 21 (irq 10) azalia0: host: High Definition Audio rev. 1.0 azalia0: codec: Sigmatel STAC9200 (rev. 34.1), HDA version 1.0 azalia0: codec: Conexant/0x2bfa (rev. 0.0), HDA version 0.9 azalia0: codec[1]: No support for modem function groups azalia0: codec[1]: No audio function groups audio0 at azalia0 ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x01 pci1 at ppb0 bus 11 ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x01 pci2 at ppb1 bus 12 wpi0 at pci2 dev 0 function 0 "Intel PRO/Wireless 3945ABG" rev 0x02: apic 2 int 17 (irq 3), MoW2, address 00:1b:77:02:1d:9e ppb2 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x01 pci3 at ppb2 bus 9 bge0 at pci3 dev 0 function 0 "Broadcom BCM5752" rev 0x02, BCM5752 A2 (0x6002): apic 2 int 18 (irq 11), address 00:18:8b:c7:55:38 brgphy0 at bge0 phy 1: BCM5752 10/100/1000baseT PHY, rev. 0 uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: apic 2 int 20 (irq 9) uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: apic 2 int 21 (irq
Re: Java 1.5 issue - lazy binding
Otto Moerbeek wrote: On Fri, 28 Sep 2007, Stijn wrote: Hi, I've built Java 1.5 as explained on: "http://openbsd.org/faq/faq13.html#javaplugin"; After the "make install" I created the symbolic link to use the Java-plugin in firefox. "ln -s /usr/local/jdk-1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so \ /home/stijn/.mozilla/plugins" After I start firefox and enter "about:plugins", firefox becomes unresponsive. On my xterm console I get the error message: "/usr/local/mozilla-firefox/firefox-bin:/usr/local/jdk-1.5.0/jre/plugin/i386/ns7/libjavaplugin_oji.so: undefined symbol '__cxa_atexit' lazy binding failed!" When I remove the symbolic link firefox works fine. Entering "about:plugins" returns information about installed plugins. Anybody knows how to fix this? I have no idea what the lazy binding means. Check http://www.openbsd.org/faq/current.html#20070903 Probably firefox was compiled before the change, while the plugin after, or something like that. -Otto Hi, I did the following to solve this issue: -upgraded to the latest snapshot (24 Sept) -updated ports tree -upgraded packages (pkg_add -vi) -rebuilt jdk 1.5 -installed jre 1.5 package Firefox displays the "about:plugins" without freezing now. Thanks Otto for the pointer. BR, Stijn
Re: How can I install 4 OS'es on one disk?
I was very impressed about BootIt NG. Only a few MB in size, bootable from CD. Resized my Windows partition in less than two minutes. I don't know if it's still freeware though... HTH, Stijn Steve Shockley wrote: stan wrote: Is it possible to do this on the one disk. I do have enough space, my concern is about portions. If it is possible can anyone give me an idea how best to approach this? Or a pointer to some docs? I've done what you mention using Acronis Disk Director or Partition Magic, but they're not Free in any sense. Resizing partitions is handy when multibooting, but I'm not familiar with a partition resizer that works with OpenBSD partitions. If you have a laptop, it may be easier to just swap disks.
Intel NAS SS4000-E
Hi, While looking for a NAS solution I stumbled on http://www.intel.com/design/servers/storage/ss4000-e/ss4000e.pdf. Looks like a nice system to run OpenBSD on. It features an Intel 80219 processor, 2 GB NICs, 4 SATA, etc. Is this supported by the armish port? I didn't find it on the supported hardware page though. BR, Stijn
Re: Shutdown and Powerdown when the power button is pressed
Ajitabh Pandey wrote: Hi, I have a Dell Pentium III 1GHz/512MB running OpenBSD 4.3. I am running the generic kernel. When I press the power button on the front the machine just switches off. I wanted if the power button is pressed then the shutdown is started followed by poweroff (shutdown -hp now). This machine was running Ubuntu sometime back and If I remember correct this used to happen. Any pointers, please? Regards. 1. Provide a dmesg 2. What action is set in the BIOS for "power button" 3. What does "halt -p" do? HTH, Stijn
Re: Need some information...
mojo fms wrote: I would like a way to monitor all files on a server and when one changes it makes the exact same changes to a server. I need byte by byte or bit by bit replication of one server to multiple other servers if possible. Thanks Maybe "rsync" is what you are looking for? HTH, Stijn
Re: Use a USB flash drive to install a snapshot
Joe S wrote: On Wed, Sep 17, 2008 at 10:44 AM, Joe S <[EMAIL PROTECTED]> wrote: Has anyone been able to configure a usb flash drive to boot a snapshot install? I don't like to burn so many cd's. I tried to install via PXE, but the laptop I use (Thinkpad X24) doesn't support PXE. I've been able to install 4.3 from usb flash drive thanks to these instructions: http://www.azbsd.org/~marco/openbsd/flashkeyinstaller/ Let me clarify what I'm trying to do. I'm not trying to install OpenBSD on a flash drive. I'm trying to install OpenBSD on a laptop, with the flash drive being the bootable source of the installation, much like a CD. I can't PXE and I'm trying to find a way to avoid burning CD's, although I may buy some CD-RW's if I have to. As others already pointed out: -Install OpenBSD on a flash drive. -Copy a bsd.rd on the flash drive. You can even copy one for amd64 (and call it bsd_amd64.rd), i386 (bsd_i386.rd), etc... -Copy the install packages on the flash drive, e.g. in /openbsd/amd64/*, /openbsd/i386/*, etc... -Boot the portable from the flash drive. At the boot prompt enter "bsd_amd64.rd". -Select the hard drive of the portable as installation target. -Select the appropriate directory of the sources, e.g. /openbsd/amd64. -Complete the install. -Reboot the portable without the flash drive. The portable should now start booting from the hard drive. PS: No CD's were harmed during this installation process. This is how I installed OpenBSD on my eeepc. Final note: it's possible that you have to change /etc/fstab to reflect the hardware change after removing the flash drive (e.g. sd1 becomes sd0). The rest is up to you. HTH, Stijn
Re: [OT] IronPort mail servers
Joshua Gimer wrote: We have been using Ironport for about a year now as our email security appliance. We have roughly 60,000 addresses that we route mail for and take in about 16 million messages a day. We went from a total of 16 systems running just about everything imaginable including email encryption, to 2 Ironport C650 appliances. We have been very happy with Ironport up to this point, the boxes are very low maintenace and they have given us the ability to perform some more advance mail routing functions that were not supported in our old system. The support and response from Ironport has also been exceptional. They have processed feature requests, and depending on the contract that you have they can provide 24-hour on-site support. Josh On Fri, Sep 26, 2008 at 12:50 AM, Chris <[EMAIL PROTECTED]> wrote: I know this is not OpenBSD related but I'm just asking for if someone has any first-hand experience with IronPort [1] My company has decided to move away from Solaris 8 mail system (sendmail, clamav, mimedefang, relaydelay and god-knows-what-else) - the reason for the move is that the current system is kind of glued together and no one knows how it all works. People who implemented these have left with no documentation behind. Anyhow, we have acquired one IronPort for free plus free training. After doing the training it looks like an extremely powerful little box that can do the whole lot: mail, spam, virus checking, LDAP lookup, SPF...everything from a nice GUI and also CLI. I just wonder if anyone has any first-hand experience with IronPort and would share their experience. Thanks. -- [1] http://en.wikipedia.org/wiki/IronPort I can only second that. I implemented a couple of systems at big customers and they never looked back. Easy to configure, low maintenance, very high catch rate. When customers ask me what to do about spam, my answer is simple: IronPort. Have fun (doing something else than cleaning up spam messages), Stijn
Re: Experiences running named and rndc on 4.4 vs 4.3
Don Jackson wrote: Today I began testing named on a freshly installed OpenBSD 4.4 amd64 machine, using my old named.conf file from 4.3 (which was still running named version 9.4.2) When the machine first boots after the install, /etc/rc determines there is no rndc.key, and generates one: rndc-confgen: generating new shared secret... done. starting named Here are the owner, group, and file modes of the two different copies of rndc.key that are generated: # ls -lAF /etc/rndc.key /var/named/etc/rndc.key -rw--- 1 root wheel 77 Nov 11 12:24 /etc/rndc.key -rw-r- 1 root wheel 77 Nov 11 12:24 /var/named/etc/rndc.key named only cares about the rndc.key in /var/named/etc Looking at the logs: /var/log/daemon, one can see: Nov 11 12:24:10 svn01 named[142]: none:0: open: /etc/rndc.key: permission denied Nov 11 12:24:10 svn01 named[142]: couldn't add command channel 127.0.0.1#953: permission denied Here is my workaround: # chown root:named /var/named/etc/rndc.key # ls -lAF /var/named/etc/rndc.key -rw-r- 1 root named 77 Nov 11 12:24 /var/named/etc/rndc.key Should /etc/rc set the group ownership of /var/named/etc/rndc.key? Comments? Hi, On my system this file is already owned by named: # ls -al /etc/rndc.key -rw--- 1 root wheel 77 Oct 7 22:47 /etc/rndc.key # ls -al /var/named/etc/rndc.key -rw-r- 1 root named 77 Oct 7 22:47 /var/named/etc/rndc.key # uname -a OpenBSD puffy.localnet 4.4 GENERIC#1074 i386 HTH, Stijn
Re: libiconv problem
farhan ahmed wrote: Hello, I have been facing weird login problem, have been running OpenBSD 4.4 for months without any problem, today I installed some packages and after that I am unable to login, it is production pf/CARP firewall server, all daemons are runninng fine but can't get login. Please help me to sort out this. OS: BSD 4.4 Hardware: SUN Fire X2100 [EMAIL PROTECTED] ssh 10.108.128.1 [EMAIL PROTECTED]'s password: -bash: can't load library 'libiconv.so.5.0' connection to 10.108.128.1 closed I have libiconv.so.5.0 in /usr/local/lib. Even i tried to login from console but getting same error. Please help me how can I solve this. Thanks, -- Regards, Farhan Ahmed today. http://www.ninemsn.com.au/hotmailroadtrip Hi, 1. don't log in remotely as root. 2. don't use bash as shell for root. 3. and if you really want to ignore good advice 1 & 2, adapt your PATH variable to include /usr/local/lib/. HTH, Stijn
Re: bioctl and RAID0
W (Storm)" rev 0x01 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) agp0 at vga1: aperture at 0xe800, size 0x400 drm at vga1 unsupported re0 at pci0 dev 15 function 0 "Realtek 8169" rev 0x10: RTL8169/8110SB (0x1000), irq 5, address 00:80:5a:67:6e:01 rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 3 rl0 at pci0 dev 16 function 0 "Realtek 8139" rev 0x10: irq 9, address 00:e0:4c:a0:1b:c9 rlphy0 at rl0 phy 0: RTL internal PHY isa0 at pcib0 isadma0 at isa0 com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pmsi0 at pckbc0 (aux slot) pckbc0: using irq 12 for aux slot wsmouse0 at pmsi0 mux 0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: spkr0 at pcppi0 lm0 at isa0 port 0x290/8: W83782D npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 "VIA UHCI root hub" rev 1.00/1.00 addr 1 usb1 at uhci1: USB revision 1.0 uhub1 at usb1 "VIA UHCI root hub" rev 1.00/1.00 addr 1 biomask efcd netmask efed ttymask mtrr: Pentium Pro MTRR support softraid0 at root wd0c: aborted command, interface CRC error reading fsbn 0 (wd0 bn 0; cn 0 tn 0 sn 0), retrying wd0: transfer error, downgrading to Ultra-DMA mode 3 wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 3 wd0c: aborted command, interface CRC error reading fsbn 0 (wd0 bn 0; cn 0 tn 0 sn 0), retrying wd0: soft error (corrected) root on wd0a swap on wd0b dump on wd0b == -- "On two occasions I have been asked [by members of Parliament!], `Pray, Mr. Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." -- Charles Babbage Hi, Did you read the EXAMPLES section in SOFTRAID(4) and followed it by the letter? I would also recommend to try another PATA cable (80-conductor if possible) to see whether the CRC errors disappear. HTH, Stijn
Re: libiconv problem
Christian Weisgerber wrote: Stijn <[EMAIL PROTECTED]> wrote: 1. don't log in remotely as root. There is no good reason not to. In fact, if you don't work on a machine and just have it sitting in a corner moving packets, there is no point in even creating a user account. 2. don't use bash as shell for root. Or at least understand what you are doing. 3. and if you really want to ignore good advice 1 & 2, adapt your PATH variable to include /usr/local/lib/. That is complete nonsense. Well I'm not going to argue about the benefits of whether or not logging in as root, that depends on numerous reasons. There are enough threads about that in the archives. The point is, this guy shot his foot off when changing his root shell (which is probably dynamically linked) and locked himself out. Now, he has at least one solution to avoid that in the future. Like you said so well, "at least understand what you are doing". All the best, Stijn
Re: libiconv problem
Antoine Jacoutot wrote: On Sat, 29 Nov 2008, Stijn wrote: Well I'm not going to argue about the benefits of whether or not logging in as root, that depends on numerous reasons. There are enough threads about that in the archives. The point is, this guy shot his foot off when changing his root shell (which is probably dynamically linked) and locked himself out. Now, he has at least one solution to avoid that in the future. Which is? I had sent the OP a private message on how to use "sudo". If he then gets locked out of this regular user account he still has the default root account to fall back on. Like you said so well, "at least understand what you are doing". Do you? Really?
Re: bash for root?
Dieter wrote: 2. don't use bash as shell for root. Or at least understand what you are doing. What is wrong with bash as shell for root? (Assuming bash is in /bin and statically linked.) There's nothing wrong with that if you make it statically linked and put it in /bin. You know what, and why, you are doing it ;) My only advice to the OP was to be careful which shell to choose for the root account, especially bash which is dynamically linked and installed by default in /usr/local/bin/. I hope I didn't offend too many others with my suggestion... All the best, Stijn
Re: Problems reading audio cdrom on 4.2 sparc64
Jacob Meuser wrote: On Thu, Apr 10, 2008 at 04:57:29PM +0200, Hannah Schroeter wrote: Hi! On Wed, Apr 09, 2008 at 05:49:57PM +, Jacob Meuser wrote: On Wed, Apr 09, 2008 at 06:25:53PM +0200, Hannah Schroeter wrote: On Wed, Apr 09, 2008 at 03:47:26PM +, Stuart Henderson wrote: On 2008-04-09, Unix Fan <[EMAIL PROTECTED]> wrote: If you want to dump the contents into PCM audio, look in the ports.. install "cdrtools" and use the "cdda2wav" application. No need for 3rd party software for this simple task, take a look at cdio(1). It does a lot more than you probably expect. Nice, but it can't rip to stdout (for example to encode the data in a pipe, e.g. into mp3 or ogg/vorbis, w/o storing the uncompressed audio inbetween). cdda2wav/cdparanoia *can* do that. (Frontends like grip, can't, again, alas.) $ mkfifo track01.wav $ ffmpeg -i - track01.mp3 < track01.wav & $ cdio cdrip 1 Probably works, but *yuck*. so put it in a script. then you don't have to see the yuckiness :) joking aside, adding the ability to choose the output filenames for the cdrip command might well be useful. Or even better if you could use the file names provided by cddb.
Re: security fixes for packages
Check the archives. This question has been answered already several times. Here's an answer from Nick Holland on such a question: http://marc.info/?l=openbsd-misc&m=119931837024703&w=2 BR, Stijn LEFIEUX Morgan wrote: Hi, i was looking at this page http://www.openbsd.org/pkg-stable.html and would like to know why there is no security fixes for packages after 4.1 release ? Thanks. Comete
Re: Clock settings and FAQ 8.25
Rod Whitworth wrote: Hi Nick, You may notice that I've made this public. Not to get a democratic election started, just to get the info out to some who may find it useful even if you don't reckon it's good enough for an FAQ entry. For years I have been doing lots of installs of OpenBSD (snapshots mostly) on dual-booting machines (Thinkpads mostly) with XP the other, hr, OS. They need to run both. This is not a perfect world. Anyway, early on I discovered the FAQ item about HW clock settings et c. and it worked fine but eventually it began to grate on my nerves. I was doing a mod to OpenBSD every time and the XP clock just stayed there. One more thing to forget when doing a new install. So I sussed out the fact that I can mod XP once and it will work on UTC HW clock and then there is nothing to forget for my favourite OS. I'm sure there are others out there who know but I never saw the method discussed in the OpenBSD context. So here is a file I call UTChwClock.reg - contents are: Windows Registry Editor Versio 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation ] "RealTimeIsUniversal"=dword:0001 NOTE: There are only 3 lines in the DOS format text file. The second line above is split and must be rejoined in your copy. It makes a new registry entry or modifies an existing one. I expect anybody using it to take the usual precautions when modifying XP registry settings. Don't ask me for my recommendations - ask a windows expert. If you do it incorrectly just remember that I warned you that it is delicate surgery and I'm not in control of your machine or actions. Now, after all the caveats (CYA paper), beginners will need to know that one just needs to execute that file (e.g. put it on desktop and doubleclick will do) to make the change. Then resync the windows clock or do the BIOS change. Et voila! No more settings change in OpenBSD. Users who like it should show their gratitude by donating to OpenBSD please. R/ *** NOTE *** Please DO NOT CC me. I subscribed to the list. Mail to the sender address that does not originate at the list server is tarpitted. The reply-to: address is provided for those who feel compelled to reply off list. Thankyou. Rod/ --- This life is not the real thing. It is not even in Beta. If it was, then OpenBSD would already have a man page for it. Hi, I've been playing with this setting today, and it's really flaky. After suspending or hibernating Windows uses BIOS clock as local time (Apparently this is a known issue). The time even got back to local time without a suspend/hibernation; I don't know why/how this happened (maybe screensaver??)... I only realized this when leaving work. "Thanks Rod, for the extra hour I stayed at work!" ;-) Luckily I'm in GMT+1 time zone. If I was working "down under" I would probably still be at work... I agree with Nick to leave this out of the FAQ. There are too many caveats with this solution... Here's a good read about this issue: http://www.cl.cam.ac.uk/~mgk25/mswish/ut-rtc.html HTH, Stijn
Re: anyone, low power rack-mount server for home usage?
Didier Wiroth wrote: Hello, I would like to buy/build a low power 19" rack-mount server for home usage that will run openbsd. The server should be used for (secure hardware) file storage (some kind of hardware raid would be nice), nfs server, dhcp & dns caching I was wondering if some of you are using this type of low power hardware at home? Can you recommend such a rack-mount device? Can you recommend a european online reseller? Thank you very very much for your advices! Kind regards, Didier How about these ones: http://linitx.com/viewcategory.php?catid=123&pp=116,123 I haven't used any of those though. I bought this one for home use, and I'm very happy with it: http://linitx.com/viewproduct.php?prodid=12137 You can find more information on the vendor's home page: http://www.lex.com.tw/ And here's the obligatory dmesg & sysctl porn (yes, I know, it needs a more current snapshot...) HTH, Stijn OpenBSD 4.6-current (GENERIC) #123: Sat Aug 22 14:20:26 MDT 2009 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: VIA C7 Processor 1000MHz ("CentaurHauls" 686-class) 1.01 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2,xTPR real mem = 1005023232 (958MB) avail mem = 964964352 (920MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 08/22/08, BIOS32 rev. 0 @ 0xf9f00, SMBIOS rev. 2.3 @ 0xf (33 entries) bios0: vendor Phoenix Technologies, LTD version "6.00 PG" date 08/22/2008 apm0 at bios0: Power Management spec V1.2 (slowidle) apm0: AC on, battery charge unknown acpi at bios0 function 0x0 not configured pcibios0 at bios0: rev 2.1 @ 0xf/0xd654 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfd550/240 (13 entries) pcibios0: PCI Exclusive IRQs: 5 10 11 pcibios0: PCI Interrupt Router at 000:17:0 ("VIA VT82C596A ISA" rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc/0x1 cpu0 at mainbus0: (uniprocessor) cpu0: RNG AES AES-CTR SHA1 SHA256 RSA cpu0: unknown Enhanced SpeedStep CPU, msr 0x08100a1308000a13 cpu0: using only highest and lowest power states cpu0: Enhanced SpeedStep 1001 MHz: speeds: 1333, 1067 MHz pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 "VIA CN700 Host" rev 0x00 viaagp0 at pchb0: v3 agp0 at viaagp0: aperture at 0xe800, size 0x1000 pchb1 at pci0 dev 0 function 1 "VIA CN700 Host" rev 0x00 pchb2 at pci0 dev 0 function 2 "VIA CN700 Host" rev 0x00 pchb3 at pci0 dev 0 function 3 "VIA PT890 Host" rev 0x00 pchb4 at pci0 dev 0 function 4 "VIA CN700 Host" rev 0x00 pchb5 at pci0 dev 0 function 7 "VIA CN700 Host" rev 0x00 ppb0 at pci0 dev 1 function 0 "VIA VT8377 AGP" rev 0x00 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 "VIA S3 Unichrome PRO IGP" rev 0x01 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) em0 at pci0 dev 5 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 10, address 00:30:18:4c:18:c9 em1 at pci0 dev 6 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 11, address 00:30:18:4c:18:ca em2 at pci0 dev 7 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 5, address 00:30:18:4c:18:cb ral0 at pci0 dev 9 function 0 "Ralink RT2561" rev 0x00: irq 11, address 00:08:a1:9c:33:68 ral0: MAC/BBP RT2661B, RF RT2527 pciide0 at pci0 dev 15 function 0 "VIA VT6420 SATA" rev 0x80: DMA pciide0: using irq 11 for native-PCI interrupt pciide1 at pci0 dev 15 function 1 "VIA VT82C571 IDE" rev 0x06: ATA133, channel 0 configured to compatibility, channel 1 configured to compatibility pciide1: channel 0 disabled (no drives) wd0 at pciide1 channel 1 drive 0: wd0: 1-sector PIO, LBA, 497MB, 1018080 sectors wd0(pciide1:1:0): using PIO mode 4 uhci0 at pci0 dev 16 function 0 "VIA VT83C572 USB" rev 0x81: irq 10 uhci1 at pci0 dev 16 function 1 "VIA VT83C572 USB" rev 0x81: irq 10 uhci2 at pci0 dev 16 function 2 "VIA VT83C572 USB" rev 0x81: irq 11 uhci3 at pci0 dev 16 function 3 "VIA VT83C572 USB" rev 0x81: irq 11 ehci0 at pci0 dev 16 function 4 "VIA VT6202 USB" rev 0x86: irq 5 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 "VIA EHCI root hub" rev 2.00/1.00 addr 1 viapm0 at pci0 dev 17 function 0 "VIA VT8237 ISA" rev 0x00 iic0 at viapm0 spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity PC2-4200CL5 auvia0 at pci0 dev 17 function 5 "VIA VT8233 AC97" rev 0x60: irq 5 ac97: codec id 0x56494161 (VIA Technologies VT1612A) ac97: codec features headphone, 18 bit DAC, 18 bit ADC, KS Waves 3D audio0 at auvia0 usb1 at uhci0: USB revision 1.0 uhub1 at usb1 "VIA UHCI root hub" rev 1.00/1.00 addr 1 usb2 at uhci1: USB revision 1.0 uhub2 at usb2 "VIA UHCI root hub" rev 1.00