Re: now, some issues that are OBSD front and center

2005-12-27 Thread Otto Moerbeek
On Tue, 27 Dec 2005, Julesg wrote: > So I spent yesterday putting up a nice OpenBSD box; Lot's of space, very > fast -- and first thing today I discovered that EGCS does not equal GCC. > > I'd like to know what's involved in removing EGCS and installing GCC? > > And if you aren't a compiler pe

iic verbosity

2005-12-27 Thread Theo de Raadt
Most of our work in the iic(4) sensor framework is enabled now in -current and in the latest snapshots. Please note that it is quite verbose in dmesg for the moment; if you run into problem send me a private mail containing a 2-line machine description, the full dmesg, and output of sysctl hw.sens

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread Diana Eichert
On Tue, 27 Dec 2005, Dale Rahn wrote: SNIP > If anyone knows about an ARM 11 based device that has reasonable IO: network, > disk options (CF or better), minipci, ... The developers would be quite > interested in finding out about such a device. > > Dale Rahn [EMAIL PRO

Re: Unexpected "Expect timeout" in chat script (ppp -auto)

2005-12-27 Thread Andrew C
> I'm running PPP 3.1 (/usr/sbin/ppp) on OpenBSD 3.7 / i386. Every now > and then, I run into a problem in which the chat script stops working > in -auto mode: > Dec 20 20:45:08 wally ppp[20296]: tun0: Chat: Expect(650): CONNECT > 115200 > Dec 20 20:45:21 wally ppp[20296]: tun0: Chat: Expect timeou

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread Dale Rahn
On Wed, Dec 28, 2005 at 12:52:23AM +, Stuart Henderson wrote: > > During this time I was reading through the documentation and realized > > there's just an ARM7 processor on the device. I know that some of the > > linksys devices have one of those other broken unix variant running on them, > >

Re: unzip path for f-prot update problem

2005-12-27 Thread Nick Holland
Denny White wrote: > When f-prot tries to update in root's cron, it reports fatal > error, can't find unzip. Unzip is located in /usr/local/bin > which is in root's path env: > > PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/sbin: > /usr/local/bin WHICH "root's path env"? When root

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread eric
On Tue, 2005-12-27 at 20:54:48 -0500, Steve Shockley proclaimed... > Sure it'd be nice, but even if you had a port, OpenBSD does native > compiles, so by the time you finished building the OS, you'd be two > releases behind. Heh, true. That would be awful! There'd probably have to be quite a bi

now, some issues that are OBSD front and center

2005-12-27 Thread Julesg
So I spent yesterday putting up a nice OpenBSD box; Lot's of space, very fast -- and first thing today I discovered that EGCS does not equal GCC. I'd like to know what's involved in removing EGCS and installing GCC? And if you aren't a compiler person, my guess is that this not a trivial thing

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread Steve Shockley
eric wrote: Right, but the problem with a zaurus is that it doesn't lend itself to be a gateway easily. Further, there's many insecure products out there that I'm sure many of us are using for wireless access. Yes, I've created ad-hoc networks, etc., but this is a low powered device with no movin

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread eric
On Wed, 2005-12-28 at 00:52:23 +, Stuart Henderson proclaimed... > Obviously I don't speak for developers, but I'm not sure a device with > a processor which looks around 10% the speed of a Zaurus, 8mb RAM, and > undocumented wireless nic is going to be interesting enough to warrant > the time

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread Stuart Henderson
> During this time I was reading through the documentation and realized > there's just an ARM7 processor on the device. I know that some of the > linksys devices have one of those other broken unix variant running on them, > so would it ever be likely we'd see a port to one of these simple devices

Re: mergemaster (was: Re: CVS: cvs.openbsd.org: ports)

2005-12-27 Thread Han Boetes
Christian Weisgerber wrote: > Over on ports-changes, Antoine Jacoutot <[EMAIL PROTECTED]> wrote: > > Since gdiff isn't needed anymore, do you think mergemaster could be > > integrated in the base system one of those days, > > I'm considering this. Are you considering mergeslave as well? # Han

Re: ccd mirroring and ccdxc

2005-12-27 Thread Nick Holland
Bobby Johnson wrote: > A few questions in regards to the discussion between Robert Haarman and > mickey around Nov 24 on ccd mirroring. The conclusion is don't use c > for a usable partition in a ccd device. If "conclusion" is the right word in a discussion between someone who didn't understand t

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Damien Miller
Dave Feustel wrote: > The problem with /tmp/.X11-unix/X0 addressed by the > 2003 paper on XFree86 still exists today with Xorg. What problem? X11 implements its own authentication. -d

Re: flash on OpenBSD

2005-12-27 Thread Andrew Daugherity
On 12/26/05, Han Boetes <[EMAIL PROTECTED]> wrote: > Hi, > > I just read this article: > > http://www.kaourantin.net/2005/12/flash-player-8-for-linux-update.html > > Via OSNews. > > If there ever was a chance to lobby for support of flash on > OpenBSD it is now and there. Doesn't the Linux flash

mergemaster (was: Re: CVS: cvs.openbsd.org: ports)

2005-12-27 Thread Christian Weisgerber
Over on ports-changes, Antoine Jacoutot <[EMAIL PROTECTED]> wrote: > > Modified files: > > sysutils/mergemaster: Makefile > > sysutils/mergemaster/patches: patch-mergemaster_sh > > > > Log message: > > use system sdiff, drop GNU diff dependency > > Since gdiff isn't needed anymore, do you

Re: a stupid question, and OT to boot

2005-12-27 Thread David Benfell
On Tue, 27 Dec 2005 16:11:09 -0500, Matthew Jenove wrote: > David Benfell <[EMAIL PROTECTED]> wrote: > > Why is this off topic? > > Because it is administrivia more suitable for a unix newbies list? > > man afterboot, then searching for "network" will point you to > ifconfig, which would be the r

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Ted Unangst
On 12/27/05, Otto Moerbeek <[EMAIL PROTECTED]> wrote: > > this is obviously a source of confusion. the permissions on a socket > > mean *nothing*. anyone can open any socket regardless of permissions, > > so long as they have necessary directory permissions to find it. > > That used to be the cas

Re: RELEASE BUG - ami0: timeout ccb 1

2005-12-27 Thread bofh
On 12/27/05, Marco Peereboom <[EMAIL PROTECTED]> wrote: > > Strip a single RAID 5 set across channels to speed up the SCSI > backend. Then slice it up using disklabel. That should do the trick. My problem is that the 2 OS drives are 160GB, whereas my attempt at a poor man's raid5 are 4x250GB.

Re: a stupid question, and OT to boot

2005-12-27 Thread Matthew Jenove
David Benfell <[EMAIL PROTECTED]> wrote: > Why is this off topic? Because it is administrivia more suitable for a unix newbies list? man afterboot, then searching for "network" will point you to ifconfig, which would be the right way to figure out the IP address(es) -- where as the "where did tha

Re: Yet Another PF (authpf) Question.

2005-12-27 Thread Rob
On 12/27/05, Stuart Henderson <[EMAIL PROTECTED]> wrote: > > > Quick background: I have a wandering, disorganized, computer-illiterate > boss > > who needs to send mail from his laptop from any network, without > changing > > any of his computer's settings. I've set up postfix to handle this, but >

Re: How to log all entered commands?

2005-12-27 Thread MK
I've installed your patch. Works really great. Thanks very very much for it. Have a nice day MK - Original Message - From: "ober" <[EMAIL PROTECTED]> To: "Ted Unangst" <[EMAIL PROTECTED]> Cc: "MK" <[EMAIL PROTECTED]>; Sent: Tuesday, December 27, 2005 7:33 PM Subject: Re: How to log al

OpenBSD on D-Link Access Points

2005-12-27 Thread eric
This past week I was having to play tech support for a family member and realized the firmware image on his dlink DI-614+ was corrupt. After a quick upload of a new image, it was working again. During this time I was reading through the documentation and realized there's just an ARM7 processor on

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Daniel Ouellet
Dave, I keep reading your emails and many answer to them as well. So far, nothing is evidence or anything yet. Also, based on some of your latests emails, look like the intruder is still coming back to your box still and you reboot the KDE to kick him/here out. Look like you are saying there

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Otto Moerbeek
On Tue, 27 Dec 2005, Ted Unangst wrote: > On 12/27/05, Otto Moerbeek <[EMAIL PROTECTED]> wrote: > > On Tue, 27 Dec 2005, Dave Feustel wrote: > > > > > by KDE are root-owned and world rw. There is also a problem with the > > > socket > > > /tmp/.X11-unix/X0. This is documented on the web and even

Re: a stupid question, and OT to boot

2005-12-27 Thread David Benfell
On Mon, 26 Dec 2005 22:34:28 -0600, Julesg wrote: > Because I want to discover the IP address at box REMOTE. > Probably the easiest way is to run tcpdump. You'll want options to limit the output to ICMP traffic. "man tcpdump" for details. If, however, REMOTE's IP address is in a network addres

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Dave Feustel
Marc Espie and Dirk at kde have acknowledged the security problem OpenBSD has with kde kgrantpty. The problem with /tmp/.X11-unix/X0 addressed by the 2003 paper on XFree86 still exists today with Xorg. If the rest of you fail to see the problem, even when the evidence is available to you on your

Re: Login shell chroot implementation - unofficial chrsh openbsd port issues

2005-12-27 Thread Ted Unangst
On 12/27/05, Paul Pruett <[EMAIL PROTECTED]> wrote: > NOTE - DON't even try to use chroot to limit users accounts unless you > understand it can be trivial to overcome: > http://www.bpfh.net/simes/computing/chroot-break.html yes, if you're root. why are all your users logging in with root priv

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Ted Unangst
On 12/27/05, Otto Moerbeek <[EMAIL PROTECTED]> wrote: > On Tue, 27 Dec 2005, Dave Feustel wrote: > > > by KDE are root-owned and world rw. There is also a problem with the socket > > /tmp/.X11-unix/X0. This is documented on the web and even in an OpenBSD > > presentation on XFree86 from about 2002.

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Otto Moerbeek
On Tue, 27 Dec 2005, Dave Feustel wrote: > On Tuesday 27 December 2005 11:05, Otto Moerbeek wrote: > > > > On Tue, 27 Dec 2005, Dave Feustel wrote: > > > > > by KDE are root-owned and world rw. There is also a problem with the > > > socket > > > /tmp/.X11-unix/X0. This is documented on the web

Re: erratic networking problem

2005-12-27 Thread Han Boetes
Ted Unangst wrote: > On 12/23/05, Han Boetes <[EMAIL PROTECTED]> wrote: > > tcp: > > 860321 packets received > > 229685 acks (for 489089407 bytes) > > 16982 duplicate acks > > 0 acks for unsent data > > 0 acks for old data > >

Re: How to log all entered commands?

2005-12-27 Thread ober
MK try it now. http://www.linbsd.org/log_execve.38.patch Thanks to Ted for pointing out the not so obvious mistakes in it. Thanks. -Ober On Mon, 26 Dec 2005, Ted Unangst wrote: On 12/25/05, ober <[EMAIL PROTECTED]> wrote: Here is a patch, probably something want to test before using on a pr

Re: Login shell chroot implementation - unofficial chrsh openbsd port issues

2005-12-27 Thread Paul Pruett
- - details and notes -- read no further unless need to know - . rm ./chrsh/w-chrsh-1.0b2/chrsh/chrsh.c oops thats my very bad, should be rm

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Dave Feustel
On Tuesday 27 December 2005 11:05, Otto Moerbeek wrote: > > On Tue, 27 Dec 2005, Dave Feustel wrote: > > > by KDE are root-owned and world rw. There is also a problem with the socket > > /tmp/.X11-unix/X0. This is documented on the web and even in an OpenBSD > > presentation on XFree86 from about

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Greg Thomas
On 12/27/05, Dave Feustel <[EMAIL PROTECTED]> wrote: > On Monday 26 December 2005 22:12, J.C. Roberts wrote: > > On Mon, 26 Dec 2005 11:39:22 -0500, Dave Feustel > > <[EMAIL PROTECTED]> wrote: > > > > >Don't use sudo in any konsole session. > > > > Dave, > > > > I don't think you're nuts but the fe

ccd mirroring and ccdxc

2005-12-27 Thread Bobby Johnson
A few questions in regards to the discussion between Robert Haarman and mickey around Nov 24 on ccd mirroring. The conclusion is don't use c for a usable partition in a ccd device. This sounds fine until I try to recover from a disk failure. When I use the c partition in a ccd mirror device I ca

unzip path for f-prot update problem

2005-12-27 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 When f-prot tries to update in root's cron, it reports fatal error, can't find unzip. Unzip is located in /usr/local/bin which is in root's path env: PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/sbin: /usr/local/bin Have tried unzip

Re: RELEASE BUG - ami0: timeout ccb 1

2005-12-27 Thread Marco Peereboom
Strip a single RAID 5 set across channels to speed up the SCSI backend. Then slice it up using disklabel. That should do the trick. On Dec 26, 2005, at 9:09 PM, bofh wrote: Hi, I have one megaraid i4, but with two channels set up. One raid1 for the OS, and one raid5 with 4x250G hard dr

Login shell chroot implementation - unofficial chrsh openbsd port issues

2005-12-27 Thread Paul Pruett
This is in response to an email awhile back: http://www.monkey.org/openbsd/archive/misc/0208/msg00558.html Friday, July 19, 2002, 9:01:11 AM, you wrote: I have used many softwares like chrsh (Aaron Grifford) on a port from Ben Goren but didn't get it to work. I've done *everything* Aaron and

packet filter questions

2005-12-27 Thread Mario Beltran
Hello I have a box with OpenBSD 3.8 and packet filter I have these questions about syntax of pf: 1.- May I use this syntax: table { 10.1.1.0/24 } table { 10.2.1.0/24 } table { 10.3.1.0/24 } router_one = "192.168.1.1" and then group_ping = "{" $router_one"}"

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Otto Moerbeek
On Tue, 27 Dec 2005, Dave Feustel wrote: > by KDE are root-owned and world rw. There is also a problem with the socket > /tmp/.X11-unix/X0. This is documented on the web and even in an OpenBSD > presentation on XFree86 from about 2002. Dunno about KDE but can you elaborate or give refs why having

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

2005-12-27 Thread Henning Brauer
while everybody else is busy discussing opinions I'll bother with the real question... * Sylvain Coutant <[EMAIL PROTECTED]> [2005-12-26 11:29]: > OpenBGPd looks fine for eBGP and iBGP links as long as it does not > "depend on carp". definately "works for me", and I can't imagine where it could

Re: x11 forwarding does not work until pf is disabled

2005-12-27 Thread Didier Wiroth
Great, thanks a lot, this solved the problem! Didier -Original Message- From: Joseph C. Bender [mailto:[EMAIL PROTECTED] Sent: mardi 27 dicembre 2005 15:56 To: Didier Wiroth Cc: misc@openbsd.org Subject: Re: x11 forwarding does not work until pf is disabled On Tue, 27 Dec 2005, Didier W

Re: x11 forwarding does not work until pf is disabled

2005-12-27 Thread Joseph C. Bender
On Tue, 27 Dec 2005, Didier Wiroth wrote: Did I miss something, what is my problem? Try a "set skip on { lo }" instead of the pass quick on. -- Signing off, Joseph C. Bender <[EMAIL PROTECTED]> "Does the government fear us? Or do we fear the government? When the people fear the g

Re: x11 forwarding does not work until pf is disabled

2005-12-27 Thread steven mestdagh
On Tue, Dec 27, 2005 at 02:43:48PM +0100, Didier Wiroth wrote: > Hello, > I'm running current (built a few hours ago) on a test machine. > I'm connecting via ssh (from a windows box) and I try to launch an X > application. > X forwarding fails, here is a sample output: > > ~ $ xclock & > [1] 1095

x11 forwarding does not work until pf is disabled

2005-12-27 Thread Didier Wiroth
Hello, I'm running current (built a few hours ago) on a test machine. I'm connecting via ssh (from a windows box) and I try to launch an X application. X forwarding fails, here is a sample output: ~ $ xclock & [1] 10951 [EMAIL PROTECTED] ~ $ Error: Can't open display: localhost:11.0 Unfortunatel

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Dave Feustel
On Monday 26 December 2005 22:12, J.C. Roberts wrote: > On Mon, 26 Dec 2005 11:39:22 -0500, Dave Feustel > <[EMAIL PROTECTED]> wrote: > > >Don't use sudo in any konsole session. > > Dave, > > I don't think you're nuts but the fear mongering without providing any > proof or details of a compromis

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

2005-12-27 Thread Claudio Jeker
On Tue, Dec 27, 2005 at 12:27:52PM +0100, Sylvain Coutant wrote: > Hi, > > > I think this "depend on" is a nice feature - but I would not > > use for "100% fail save" connections. > > Why not ? It has been coded for this purpose ... > No. It is a hack to make it possible to use two routers at a

Re: Debugging pxeboot on WRAP

2005-12-27 Thread Rolf Sommerhalder
Good news - my WRAPs now pxeboot OpenBSD as expected! The culprit was not pxeboot, but the etherboot PXE code 5.3.12 in BIOS 1.08 and 1.10, as supplied by PCengines. After building an etherboot 5.4.1 binary on rom-o-matic.org, merging it into the BIOS and flashing the WRAPs, network boot of OpenB

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

2005-12-27 Thread Sylvain Coutant
Hi, > I think this "depend on" is a nice feature - but I would not > use for "100% fail save" connections. Why not ? It has been coded for this purpose ... > You must take into account, > that the session will go down if you trigger a failover. Of course, this is the basic of a failover betwe

Re: ip_forward() function

2005-12-27 Thread Damien Miller
Matthew Closson wrote: > Where is the code for the ip_forward() function in 3.8? > > I found the prototype in: /usr/src/sys/netinet/ip_var.h > > void ip_forward(struct *mbuf, int); > > but no function definition. > > I also did a grep -sR "ip_forward" /usr/src > and all I found was the functio

Re: Debugging pxeboot on WRAP

2005-12-27 Thread Rolf Sommerhalder
Another OpenBSD on WRAP user wrote to me saying that pxeboot works. Also, I found http://www.ultradesic.com/?section=43 which descripbes PXE booting OpenBSD for the Soekris plattform which is very similar to WRAP. Both encouraged me to dig deeper: a) pxeboot finds both labels '!PXE' and 'PXENV' in

Re: Yet Another PF (authpf) Question.

2005-12-27 Thread Stuart Henderson
> Quick background: I have a wandering, disorganized, computer-illiterate boss > who needs to send mail from his laptop from any network, without changing > any of his computer's settings. I've set up postfix to handle this, but it's > on a local 192.168.0.0/24 net behind our firewall. One of the n

ip_forward() function

2005-12-27 Thread Matthew Closson
Never mind on my previous post. ip_forward() definition is in: /usr/src/sys/netinet/ip_input.c it's late, I missed it. -Matt-

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

2005-12-27 Thread Reto Burkhalter
Hi Sylvain > OpenBGPd looks fine for eBGP and iBGP links as long as it > does not "depend on carp". I think this "depend on" is a nice feature - but I would not use for "100% fail save" connections. You must take into account, that the session will go down if you trigger a failover. This might b

OpenBSD libusb question

2005-12-27 Thread Doug Brewer
Hello, I want to send a report 0x02 to my usb device, and using interrupt to get usb data. Would you tell me how to do this? thanks in advance. Regards, doug.

ip_forward() function

2005-12-27 Thread Matthew Closson
Where is the code for the ip_forward() function in 3.8? I found the prototype in: /usr/src/sys/netinet/ip_var.h voidip_forward(struct *mbuf, int); but no function definition. I also did a grep -sR "ip_forward" /usr/src and all I found was the function being called several times from /usr/s

Re: erratic networking problem

2005-12-27 Thread Ted Unangst
On 12/23/05, Han Boetes <[EMAIL PROTECTED]> wrote: > tcp: > 860321 packets received > 229685 acks (for 489089407 bytes) > 16982 duplicate acks > 0 acks for unsent data > 0 acks for old data > 469932 packets (416

Re: a stupid question, and OT to boot

2005-12-27 Thread Ted Unangst
On 12/26/05, Julesg <[EMAIL PROTECTED]> wrote: > I am modem'ed into a remote box, (call it box REMOTE,) while I am at box > LOCAL. > > I know my IP number (at LOCAL) > > I don't know the IP number at REMOTE > > So I am telling the REMOTE system to ping me. > > How can I look at who is pinging me o