Re: hardware: SunFire X4200 test results

2006-01-16 Thread Srebrenko Sehic
On 1/17/06, Bill Marquette <[EMAIL PROTECTED]> wrote: > > OSCL (OpenBSD Server Compatibilty List) is updated with this > > information. Find it at: > > http://www.armorlogic.com/openbsd_information_server_compatibility_list.html > > You might want to retest the DL380 G4 - I have dozens of these ru

Novice compile question

2006-01-16 Thread Didier Wiroth
Hello, (I'm a compile novice) I've recently purchased an AMD Athlon 64 x2 dual core manchester cpu. I was planning to build a fast openbsd "build" machine with this cpu. 1) Will I be able (while running the 64bit kernel & binaries!!!) to cross compile and build a release for the i386 32bit archit

ipv6 tentative address generation

2006-01-16 Thread Travers Buda
Ipv6 allows for stateless configuration of a interface. The IEEE (aka MAC or hardware address) is generally used to generate tentative addresses which commonly end up being the assigned address provided stateful addressing does not exist on the network (such as DHCP.) This is the case in OpenBS

Re: df -h stats for same file systems display different result son AMD64 then on i386

2006-01-16 Thread Daniel Ouellet
Otto Moerbeek wrote: On Mon, 16 Jan 2006, Daniel Ouellet wrote: Just a bit more information on this. As I couldn't understand if that was an AMD64 issue as illogical as that might be, I decided to put that to the test. So, I pull out an other AMD64 server and it's running 3.8, same fsize and b

Re: df -h stats for same file systems display different result son AMD64 then on i386

2006-01-16 Thread Otto Moerbeek
On Mon, 16 Jan 2006, Daniel Ouellet wrote: > Just a bit more information on this. > > As I couldn't understand if that was an AMD64 issue as illogical as that might > be, I decided to put that to the test. So, I pull out an other AMD64 server > and it's running 3.8, same fsize and bsize, one driv

Re: PF config for exchange

2006-01-16 Thread Steven S
[EMAIL PROTECTED] wrote: ... > All branches have VPN tunnels back to central location and > the firewall rules > have a pass quick over the VPN tunnels > > On the main location I have a > > pass quick log inet from to > keep state > I also have a > pass quick log inet from to > keep state ...

Re: mssql.so

2006-01-16 Thread joshua stein
> Am I doing something wrong?! yes, you are not following the advice already given to you. http://marc.theaimsgroup.com/?l=openbsd-misc&m=113729912930316&w=2

Re: PF config for exchange

2006-01-16 Thread Melameth, Daniel D.
James Mackinnon wrote: > This is a second issue that I had today with my final BSD firewall > rollout in my main center. > > This issue was with exchange > > All branches have VPN tunnels back to central location and the > firewall rules have a pass quick over the VPN tunnels > > On the main loc

Re: df -h stats for same file systems display different result son AMD64 then on i386

2006-01-16 Thread Daniel Ouellet
Just a bit more information on this. As I couldn't understand if that was an AMD64 issue as illogical as that might be, I decided to put that to the test. So, I pull out an other AMD64 server and it's running 3.8, same fsize and bsize, one drive, etc. Use rsync to mirror the content and the r

Re: Issue with TS NLB and PF config

2006-01-16 Thread Melameth, Daniel D.
James Mackinnon wrote: > As part of my rollout today to Openbsd in my datacenter, I had a > little problem, well not entirely little > > Here is the layout > > 8 TS boxes > > ip config > 192.168.0.20 > 192.168.0.21 > 192.168.0.22 > 192.168.0.23 > 192.168.0.24 > 192.168.0.25 > 192.168.0.26 > 192

PF config for exchange

2006-01-16 Thread James Mackinnon
This is a second issue that I had today with my final BSD firewall rollout in my main center. This issue was with exchange All branches have VPN tunnels back to central location and the firewall rules have a pass quick over the VPN tunnels On the main location I have a pass quick log inet from

Re: Openbsd 3.8, sun ultra 30, install problems

2006-01-16 Thread Nick Holland
Sevan / Venture37 wrote: > check the jumper settings on the CDROM, you need it set to 512byte sectors, > other wise it wont work, if there are no jumper settings for it on the drive > then its not compatible with your system. While this is true on sparc systems, I don't believe it is true on spa

Re: mssql.so

2006-01-16 Thread Ricardo Lucas
n function `tds_gethostbyname_r': threadsafe.c:230: warning: control reaches end of non-void function *** Error code 1 Stop in /tmp/freetds-0.64.dev.20060116/src/tds. *** Error code 1 Stop in /tmp/freetds-0.64.dev.20060116/src/tds (line 433 of Makefile). *** Error code 1 Stop in /tmp/freetds-0.

Issue with TS NLB and PF config

2006-01-16 Thread James Mackinnon
Hey all As part of my rollout today to Openbsd in my datacenter, I had a little problem, well not entirely little Here is the layout 8 TS boxes ip config 192.168.0.20 192.168.0.21 192.168.0.22 192.168.0.23 192.168.0.24 192.168.0.25 192.168.0.26 192.168.0.27 They have a Load Balance IP of 192.1

Re: Temperature

2006-01-16 Thread Stuart Henderson
On 2006/01/16 22:27, Ricardo Lucas wrote: > Look at this, it's look a kind of weird: You forgot the complete dmesg. In any case, unless you're running recent -current, reports of sensors problems are probably not very useful at the moment. On 2006/01/16 22:45, Ricardo Lucas wrote: > And when I tr

Re: Openbsd 3.8, sun ultra 30, install problems

2006-01-16 Thread Sevan / Venture37
also at the obp prompt run .version OpenBSD needs a minimum of the following version OBP_3.27.0,POST_1.1.1,OBDIAG_2.2 if your levels are below those you'll need to update the firmware http://sunsolve.sun.com/search/advsearch.do?collection=PATCH&type=collections&queryKey5=105930&toDocument=yes

Re: Openbsd 3.8, sun ultra 30, install problems

2006-01-16 Thread Sevan / Venture37
check the jumper settings on the CDROM, you need it set to 512byte sectors, other wise it wont work, if there are no jumper settings for it on the drive then its not compatible with your system. Sevan

Re: Temperature

2006-01-16 Thread Ricardo Lucas
Here is my dmesg: OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: AMD-K6(tm) 3D processor ("AuthenticAMD" 586-class) 494 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,PGE,MMX real mem = 200908800 (196200K) avail mem = 17644748

Re: Temperature

2006-01-16 Thread Damien Miller
On Mon, 16 Jan 2006, Ricardo Lucas wrote: > Any ideias? we can't help you without a dmesg. -d

Re: Temperature

2006-01-16 Thread Ricardo Lucas
And when I try atactl: # atactl wd0c readattr Attributes table revision: 4 ID Attribute name Threshold Value Raw 1 Raw Read Error Rate 102253 0x 2 Throughput Performance 127253 0x 3

Re: Temperature

2006-01-16 Thread Ricardo Lucas
Look at this, it's look a kind of weird: hw.sensors.0=lm0, IN0, volts_dc, 2.26 V hw.sensors.1=lm0, IN1, volts_dc, 3.94 V hw.sensors.2=lm0, IN2, volts_dc, 2.93 V hw.sensors.3=lm0, IN3, volts_dc, 4.67 V hw.sensors.4=lm0, IN4, volts_dc, 0.00 V hw.sensors.5=lm0, IN5, volts_dc, 0.00 V hw.sensors.6=lm0

Re: Mixed internal network traffic, separated multiple ISPs, help?

2006-01-16 Thread yary
My longish question left out critical pieces- the actual /etc/ files (pf.conf, hostname.*, bridgename.*) and tcpdump logs, I apologize. Thanks for reading and replying despite that. I'll be going another round tonight, and will follow up with concrete examples to the pf list, with a brief summary h

speed of failover CARP & pfsync

2006-01-16 Thread Víctor Gonzalez Salcedo
hello: i'm going to trayl a fw system with failover using CARP and pfsync, the technical requirements like bit rate are to high and i would like to know where i can find statics about how fast this solution can works thanks beforehand vegons

Re: trouble with ports

2006-01-16 Thread Josh Grosse
On Mon, Jan 16, 2006 at 05:22:51PM -0500, Charles Farinella wrote: > I have continual trouble installing from ports. I am under the > impression that I cd to the proper directory in my ports tree, type make > install and the package should install. See FAQ 15.4.1.

Re: Openbsd 3.8, sun ultra 30, install problems

2006-01-16 Thread nothingness
>>Josh wrote: >> >> >>>Hello... >>> >>>Im trying to install openbsd 3.8 onto a sun ultra 30. The box has a scsi >>>cdrom and a scsi hdd, and no floppy drive. I am using a cdrom burned >>>with the small cd38.iso image to try and install with. >>> >>>When I boot the cdrom, it says: >>> >>>ok boot

Re: trouble with ports

2006-01-16 Thread Daniel Ouellet
Charles Farinella wrote: I have continual trouble installing from ports. I am under the impression that I cd to the proper directory in my ports tree, type make install and the package should install. In more than 50% of the cases in which I attempt this, it appears to download and build the pa

trouble with ports

2006-01-16 Thread Charles Farinella
I have continual trouble installing from ports. I am under the impression that I cd to the proper directory in my ports tree, type make install and the package should install. In more than 50% of the cases in which I attempt this, it appears to download and build the package, but towards the end

Re: Patching question - when patches require a rebuild of the kernel

2006-01-16 Thread STeve Andre'
On Monday 16 January 2006 21:10, Scott Plumlee wrote: > Trying to do the 'right thing' and not keep the compiler installed on > the firewall. I've been copying binaries over from another system after > it's been patched by running make -n install to see what files would be > updated, and then copy

Re: df -h stats for same file systems display different result son AMD64 then on i386

2006-01-16 Thread Daniel Ouellet
Otto Moerbeek wrote: Now I agree that the difference you are seeing is larger than I would expect. I would run a ls -laR or du -k on the filesystems and diff the results to see if the contents are realy the same. My bet is that you'll discover some files that are not on the system with a smaller

Re: Patching question - when patches require a rebuild of the kernel

2006-01-16 Thread Joachim Schipper
On Mon, Jan 16, 2006 at 04:10:15PM -0500, Scott Plumlee wrote: > Trying to do the 'right thing' and not keep the compiler installed on > the firewall. I've been copying binaries over from another system after > it's been patched by running make -n install to see what files would be > updated, a

Re: Using freshports.org ports

2006-01-16 Thread Josh Grosse
On Mon, Jan 16, 2006 at 06:06:20PM -0300, Jo?o Salvatti wrote: > Hi all, > > I'd like to know if I can use the ports at http://www.freshports.org/ > in my OpenBSD system. These are FreeBSD ports. Binaries from these ports may be used in some circumstances, see compat_freebsd(8) for details.

Re: Using freshports.org ports

2006-01-16 Thread Joachim Schipper
On Mon, Jan 16, 2006 at 06:06:20PM -0300, Joco Salvatti wrote: > Hi all, > > I'd like to know if I can use the ports at http://www.freshports.org/ > in my OpenBSD system. Well, since it says 'FreeBSD', the answer is likely no. They might work, by virtue of Free and Open not being entirely dissim

Re: df -h stats for same file systems display different result son AMD64 then on i386

2006-01-16 Thread Daniel Ouellet
Ted Unangst wrote: run du on both filesystems and compare the results. OK, just because I am curious more then think there is a problem, and because I am still puzzle from what Otto and Ted said, here is what I did and the answer to question from Otto as well. - Both system run 3.8. (www1

Patching question - when patches require a rebuild of the kernel

2006-01-16 Thread Scott Plumlee
Trying to do the 'right thing' and not keep the compiler installed on the firewall. I've been copying binaries over from another system after it's been patched by running make -n install to see what files would be updated, and then copying those files by hand. In the case of patches that requ

Using freshports.org ports

2006-01-16 Thread João Salvatti
Hi all, I'd like to know if I can use the ports at http://www.freshports.org/ in my OpenBSD system. Thanks -- Joco Salvatti Undergraduating in Computer Science Federal University of Para - UFPA web: http://salvatti.expert.com.br e-mail: [EMAIL PROTECTED]

please: openbsd mailing list request for patch/errata announcement

2006-01-16 Thread Didier Wiroth
Hello, I noticed that there were a few post this month on misc@ about the security-announce@ mailing list and the patches found under: http://www.openbsd.org/errata.html. A few minutes ago I saw that there were also reliability fixes available for 3.8. I've subscribed to security-announce@ and po

Re: hardware: SunFire X4200 test results

2006-01-16 Thread Daniel Ouellet
Srebrenko Sehic wrote: I finally got a hold of a new Sun X4200 Opetron server. Bad news for anybody how likes Sun hardware: our mpt(8) driver doesn't support the SAS/SCSI controller resulting in no go condition. Everything else seems to work. OSCL (OpenBSD Server Compatibilty List) is updated wi

ral0 bugs on openbsd 3.8 i386?

2006-01-16 Thread Reza Muhammad
Hey guys, I'm having problem with ral0 running in hostap mode on my openbsd box (i386, running 3.8-stable). At the moment, the ral0 device acts as an access point and only using mac address filtering to be able to go on the internet. So I don't use the WEP, or IPSec, or anything like that.

Re: df -h stats for same file systems display different result son AMD64 then on i386

2006-01-16 Thread Ted Unangst
run du on both filesystems and compare the results.

Re: ral0 bugs on openbsd 3.8 i386?

2006-01-16 Thread Theo de Raadt
> Hey guys, I'm having problem with ral0 running in hostap mode on my > openbsd box (i386, running 3.8-stable). By running -stable, this is a choice you make. That choice is: Do I want to track fixes made as they head to the next release or Do I want only 10-20 super-

Re: [Fwd: Re: Static IP fallback]

2006-01-16 Thread Rico
Ok, thanks Jaochim! Gonna experiment a bit on that. Joachim Schipper wrote: On Mon, Jan 16, 2006 at 05:38:53PM +0100, Rico wrote: Hi, Thanks! Don't know why I missed that. "It is possible to define one or more fixed leases in the client configuration file.." how exactly is this setup? I'

Re: [Fwd: Re: Static IP fallback]

2006-01-16 Thread Rico
From your question, I get the impression that you haven't yet read that section. Please do so first, before asking questions. If you read the documentation (and it shows from the question you ask), people are usually more than happy to help. Your impression is wrong.

Re: Openbsd 3.8, sun ultra 30, install problems

2006-01-16 Thread J.C. Roberts
On Sun, 15 Jan 2006 21:34:37 -0500, Nick Holland <[EMAIL PROTECTED]> wrote: >Josh wrote: >> Hello... >> >> Im trying to install openbsd 3.8 onto a sun ultra 30. The box has a scsi >> cdrom and a scsi hdd, and no floppy drive. I am using a cdrom burned >> with the small cd38.iso image to try and i

Re: [Fwd: Re: Static IP fallback]

2006-01-16 Thread Joachim Schipper
On Mon, Jan 16, 2006 at 05:38:53PM +0100, Rico wrote: > Hi, > > Thanks! Don't know why I missed that. > > "It is possible to define one or more fixed leases in the client > configuration file.." how exactly is this setup? I'm afraid the laptop that held this data is rather permanently out of co

Re: OT: wrt OpenBSD, what's a good laptop

2006-01-16 Thread Christian Weisgerber
Julesg <[EMAIL PROTECTED]> wrote: > So what's the best? Why? I won't offer an opinion on that. I can contribute an interesting observation, though: Whenever a bunch of OpenBSD developers congregate, it looks like a meeting of an IBM Thinkpad fan club. -- Christian "naddy" Weisgerber

Re: which cf wifi card for a Zaurus C3100?

2006-01-16 Thread Hiroshi Maruyama
Hi, In message "which cf wifi card for a Zaurus C3100?" of <[EMAIL PROTECTED]> On Mon, 16 Jan 2006 17:29:02 +0100, Maik Kuendig <[EMAIL PROTECTED]> wrote: > Hello, > > can someone recommend a CF WiFi card for a Zaurus C3100? > > My dealer has the following cards available: > - D-Link DCF-660W

[Fwd: Re: Static IP fallback]

2006-01-16 Thread Rico
Hi, Thanks! Don't know why I missed that. "It is possible to define one or more fixed leases in the client configuration file.." how exactly is this setup? Best regards, Rico On Mon, Jan 16, 2006 at 04:05:55PM +0100, Rico wrote: Hi, Is it possible to somehow setup dhclient to fallback to s

Re: AMD64 Hardware.

2006-01-16 Thread RV Tec
Any chance of success using a LSI MegaRAID 320-1 PCI-X board instead of the SAS onboard? Is there a way to connect that board directly to the backplane, in order to keep the hotswap bays? Thanks a lot! On Sun, 15 Jan 2006, David Gwynne wrote: From: "Bill Marquette" <[EMAIL PROTECTED]> On

which cf wifi card for a Zaurus C3100?

2006-01-16 Thread Maik Kuendig
Hello, can someone recommend a CF WiFi card for a Zaurus C3100? My dealer has the following cards available: - D-Link DCF-660W - Linksys WCF12-EU by the way, can someone also recommend a network card CF or USB? Thans and best regards Maik

Re: Static IP fallback

2006-01-16 Thread Joachim Schipper
On Mon, Jan 16, 2006 at 04:05:55PM +0100, Rico wrote: > Hi, > > Is it possible to somehow setup dhclient to fallback to some predefined > static IP in case a dhcp server is down? I am thinking about specifying > something with the default attribute. See dhclient.conf(5), under 'LEASE DECLARATIO

hardware: SunFire X4200 test results

2006-01-16 Thread Srebrenko Sehic
I finally got a hold of a new Sun X4200 Opetron server. Bad news for anybody how likes Sun hardware: our mpt(8) driver doesn't support the SAS/SCSI controller resulting in no go condition. Everything else seems to work. OSCL (OpenBSD Server Compatibilty List) is updated with this information. Find

Re: OpenBGPd and TTL Security Check (RFC 3682)

2006-01-16 Thread Xavier Beaudouin
Le 16 janv. 06 ` 12:32, Claudio Jeker a icrit : On Mon, Jan 16, 2006 at 11:30:44AM +0100, Xavier Beaudouin wrote: Hi there, Is TTL Security Check (RFC 3682) is or will be implemented on OpenBGPd ? Or if it will not is there any good reasons (tm)(r) to not use it ? :) Why don't you use IPSec

Re: 3Ware Escalade 7506-8 IDE RAID controller support under OpenBSD 3.8

2006-01-16 Thread Alexander Farber
On 1/14/06, Jim Razmus <[EMAIL PROTECTED]> wrote: > Replace it with an LSI MegaRAID controller and don't look back. 3Ware > is on the same boat with Adaptec. They will not share the documentation > the developers need to fully support their controllers. man bioctl to > read what fully supported

Re: Linux/Unix Vulnerabilities Outnumber Windows' 3 To 1

2006-01-16 Thread Siju George
On 1/16/06, Tobias Ulmer <[EMAIL PROTECTED]> wrote: > On Mon, Jan 16, 2006 at 11:19:01AM +0530, Siju George wrote: > > http://www.securitypipeline.com/175801169?CID=rssfeed_pl_scp > > > > --Siju > > > > > Get the facts ;) > http://www.osvdb.org/blog/?p=79 > Thankyou for you response Steve :-) And T

Re: OT: wrt OpenBSD, what's a good laptop

2006-01-16 Thread Alexander Farber
I have T41 too and it works ok (except for my iwi which loses connection often and an "Edimax EW-7128g" PCMCIA ral card, which just won't work - maybe because of pcibios 2.1) iwi0 at pci2 dev 2 function 0 "Intel PRO/Wireless 2200BG" rev 0x05: irq 11, address 00:15:00:23:e2:9c Jan 15 10:14:20 lapt

Re: Apache logs filled with remote exploit trials

2006-01-16 Thread Joakim Aronius
Hi, Implemented these rewrite rules a while ago (think someone on this list suggested it): RewriteEngine on # RewriteLog "logs/rewrite.log" # RewriteLogLevel 1 RedirectMatch permanent (.*)cmd.exe(.*)$ http://www.dhs.gov RedirectMatch permanent (.*)root.exe(.*)$ http://www.dhs.gov Redi

Static IP fallback

2006-01-16 Thread Rico
Hi, Is it possible to somehow setup dhclient to fallback to some predefined static IP in case a dhcp server is down? I am thinking about specifying something with the default attribute. Or can this only be done by some kind of script? Best regards, Rico

Re: isakmpd fails without warning

2006-01-16 Thread Håkan Olsson
On 14 jan 2006, at 14.20, James Mackinnon wrote: Hello everyone I have a 2 central locations which have multiple interfaces (4) and have tunnels for each of these interfaces to 34 other locations.. this comes out to approx 198 tunnels on each of these 2 systems. Could you mail me the las

Re: Apache logs filled with remote exploit trials

2006-01-16 Thread Alexander Bochmann
...on Mon, Jan 16, 2006 at 12:34:54PM +0100, Didier Wiroth wrote: > [Sun Jan 15 20:53:24 2006] [error] [client 69.60.121.159] File does not > exist: /htdocs/xmlsrv/xmlrpc.php > How do "you" handle these kind of attacks? Ignoring them, mostly. It's the attack script of the month. > How or wh

Apache logs filled with remote exploit trials

2006-01-16 Thread Didier Wiroth
Hello, My apache logs are filled with these kind of attacks: [Sun Jan 15 20:53:19 2006] [error] [client 69.60.121.159] File does not exist: /htdocs/drupal/xmlrpc.php [Sun Jan 15 20:53:20 2006] [error] [client 69.60.121.159] File does not exist: /htdocs/phpgroupware/xmlrpc.php [Sun Jan 15 20:53:21

Re: OpenBGPd and TTL Security Check (RFC 3682)

2006-01-16 Thread Claudio Jeker
On Mon, Jan 16, 2006 at 11:30:44AM +0100, Xavier Beaudouin wrote: > Hi there, > > Is TTL Security Check (RFC 3682) is or will be implemented on > OpenBGPd ? Or if it will not is there any good reasons (tm)(r) to not > use it ? :) > Why don't you use IPSec? Or as second best solution TCP MD5?

Re: OpenBGPd and TTL Security Check (RFC 3682)

2006-01-16 Thread Henning Brauer
* Xavier Beaudouin <[EMAIL PROTECTED]> [2006-01-16 11:38]: > Is TTL Security Check (RFC 3682) is or will be implemented on > OpenBGPd ? you cannot implement it in userland (at least not completely). It's something that should be done sooner or later, there's code in frebsd to grab for the kern

OpenBGPd and TTL Security Check (RFC 3682)

2006-01-16 Thread Xavier Beaudouin
Hi there, Is TTL Security Check (RFC 3682) is or will be implemented on OpenBGPd ? Or if it will not is there any good reasons (tm)(r) to not use it ? :) Thanks, /Xavier

Re: df -h stats for same file systems display different result son AMD64 then on i386

2006-01-16 Thread Otto Moerbeek
On Sun, 15 Jan 2006, Daniel Ouellet wrote: > Otto Moerbeek wrote: > > On Sun, 15 Jan 2006, Daniel Ouellet wrote: > > Since the bsize and fsize differ, it is expected that the used kbytes of the > > file systems differ. Also, the inode table size will not be the same. > > Not sure that I would ag