Re: how to configure Grub 0.97 for booting my OpenBSD 4.5

2009-05-08 Thread 飞飞
I don't have a floppy drive in laptop. I just use command " fixmbr " in windows xp rescue console mode, then boot from the OpenBSD 4.5 install CD, and run "fdisk -e /dev/rwd0c" in shell, then "flag " the OpenBSD partition bootable. but boot failed, "ERR M" 2009/5/9 Steve Williams > Feifei (??) w

Re: how to configure Grub 0.97 for booting my OpenBSD 4.5

2009-05-08 Thread Steve Williams
Feifei (??) wrote: Hi, Nick, Thanks for you advices, I clear Grub from my MBR, and flag the OpenBSD partition bootable , but I also got a "ERR M" error code. Yes, I read "man biosboot", but I don't know how to resolve it. I try to reinstall OpenBSD 4.5 again , but it is the same error :(. 2009/

Re: how to configure Grub 0.97 for booting my OpenBSD 4.5

2009-05-08 Thread 飞飞
Hi, Nick, Thanks for you advices, I clear Grub from my MBR, and flag the OpenBSD partition bootable , but I also got a "ERR M" error code. Yes, I read "man biosboot", but I don't know how to resolve it. I try to reinstall OpenBSD 4.5 again , but it is the same error :(. 2009/5/7 Nick Holland >

Re: Disk enryption or storing data in safe

2009-05-08 Thread Cem Kayali
Hi, Thanks for hints, it was helpfull and i have just created an encrypted raid volume succesfully. Well, could you please advise me how i can automate to run bioctl *before* fstab entires mounted? --- so that i can push ie; /var, /usr and swap partitions into encrypted volume? Thanks in a

Re: kernel panic, how to debug? (generic mp i386)

2009-05-08 Thread Robert
On Fri, 08 May 2009 17:41:08 -0400 Dan wrote: > Today after I executed a stop on apache the machine crashed and > generated a /var/crash with: > 2.0Kbounds > 6.5Mbsd.0 > 2.0Kbsd.0.core > 2.0Kminfree > > > I have been searching and have not found a site in regards to debug > this

Re: kernel panic, how to debug? (generic mp i386)

2009-05-08 Thread Theo de Raadt
> Today after I executed a stop on apache the machine crashed and generated a > /var/crash with: > 2.0Kbounds > 6.5Mbsd.0 > 2.0Kbsd.0.core > 2.0Kminfree man savecore

Re: Recommendation for Beowulf/Apache Setup

2009-05-08 Thread Peter N. M. Hansteen
Vivek Ayer writes: > But of course, to keep it relevant, OpenBSD will run on the router and > will use hoststated http://home.nuug.no/~peter/riga2008/relayd.html. I > guess it's been renamed. I haven't paid attention. The book of PF uses > hoststated, so I guess it's already kind of obsolete. ye

kernel panic, how to debug? (generic mp i386)

2009-05-08 Thread Dan
Today after I executed a stop on apache the machine crashed and generated a /var/crash with: 2.0Kbounds 6.5Mbsd.0 2.0Kbsd.0.core 2.0Kminfree I have been searching and have not found a site in regards to debug this on OpenBSD. Could somebody shed some light? Thank you. Daniel

Re: No OS safe??

2009-05-08 Thread Noah Pugsley
+1 for friday laughs. (private) HKS wrote: > On Fri, May 8, 2009 at 11:33 AM, Bob Beck wrote: > http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html >> It's a *botnet* guys, installed by *trojan* i.e. by tricking the stupid >> > idiot > >> at the keyboar

Re: No OS safe??

2009-05-08 Thread Daniel Melameth
On Fri, May 8, 2009 at 12:17 PM, (private) HKS wrote: > Wait, so you're saying OpenBSD can't even protect me from myself? > > Also I left my laptop running OpenBSD on a table at Starbucks while I > went to the bathroom and when I came back it was gone! > > So much for secure by default... That's

Re: logging smtp connections

2009-05-08 Thread Brian A. Seklecki
On Sat, 2009-05-02 at 05:06 -0500, Robson Caetano wrote: > Hi > > I would like to log From:, To: and Subject: fields of > every SMTP connection to my internal SMTP server > that is passed by the openbsd firewall. > You're better off doing that within your MTA. Courier has a Big Brother feature:

Re: Recommendation for Beowulf/Apache Setup

2009-05-08 Thread Vivek Ayer
Thanks for the tip. I was looking at the all the options and FreeBSD/Xen looks like the best bet as far as resource throttling goes. Install ROCKS on the nodes, install Xen on ROCKS, install FreeBSD as domU and give it domU a lot of priority. I'll give it a shot and publish my findings in the futu

Re: No OS safe??

2009-05-08 Thread bofh
Well, that's because you didn't get the pro version which comes with locks and cables. On 5/8/09, (private) HKS wrote: > On Fri, May 8, 2009 at 11:33 AM, Bob Beck wrote: >>> > http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html >> >> It's a *botnet* guys, installed by *trojan* i.e.

Re: No OS safe??

2009-05-08 Thread (private) HKS
On Fri, May 8, 2009 at 11:33 AM, Bob Beck wrote: >> > http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html > > It's a *botnet* guys, installed by *trojan* i.e. by tricking the stupid idiot > at the keyboard into doing something retarded. The OS can be the most > secure thing on the p

Re: rtable and pf

2009-05-08 Thread Linus
Henning Brauer wrote: * Uwe Werler [2009-05-07 16:43]: Hello list, I have an OpenBSD box with 4.5 connected to two carriers, to one per dhcp and to the other static configured. Now I tried to change my rule set from route-to/reply-to syntax to rtable usage. Up to now I added my static config

Re: No OS safe??

2009-05-08 Thread Bob Beck
> > http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html It's a *botnet* guys, installed by *trojan* i.e. by tricking the stupid idiot at the keyboard into doing something retarded. The OS can be the most secure thing on the planet and if the person at the keyboard is stupid you'll

Re: No OS safe??

2009-05-08 Thread Darrin Chandler
On Fri, May 08, 2009 at 11:34:44AM +0100, Chris Harries wrote: > This here problem of downloading a dodgy copy of Photoshop which opens > you up for a BotNet is something that can effect all OS's.but is that > completely true? Can the same thing happen to an OpenBSD machine and > is there no way ar

Re: Problems with cas interfaces on sun v440

2009-05-08 Thread Salvatore Sciacco
Hi Michael, On Fri, May 8, 2009 at 4:21 PM, Michael wrote: > > Salvatore Sciacco schrieb: > > I've also modified some sysctl params but without success: > > net.inet.tcp.recvspace=262144 > > net.inet.tcp.sendspace=262144 > > net.inet.udp.recvspace=262144 > > net.inet.udp.sendspace=262144 > > > >

Re: Problems with cas interfaces on sun v440

2009-05-08 Thread Michael
Hi, Salvatore Sciacco schrieb: > I've also modified some sysctl params but without success: > net.inet.tcp.recvspace=262144 > net.inet.tcp.sendspace=262144 > net.inet.udp.recvspace=262144 > net.inet.udp.sendspace=262144 > > Anyone have some suggestion? I've got the same issue, but by increasing

Re: azalia

2009-05-08 Thread 23号
I checkout the newest for azalia, now anything is okay, my dmesg is: OpenBSD 4.5 (GENERIC.MP) #1: Fri May 8 21:57:45 GMT 2009 r...@obsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz ("GenuineIntel" 686-class) 1.50 GHz cpu0: FPU,V86,DE,PSE,TSC,M

Re: OT: 10GbE Physical Network Taps

2009-05-08 Thread chefren
On 05/06/09 13:33, J.C. Roberts wrote: I need to collect raw throughput statistics without increasing latency or reducing bandwidth on 10GbE fiber links, .. > As far as my understanding allows, I believe the best way to do this is with a physical network tap connected to monitoring equipment.

OpenBGPD Failover using CARP

2009-05-08 Thread Tom Martin
Hi allWe are now busy implementing a redundancy environment using openBSD4.5 with OpenBGPD. In this setting we use a CARP interface to realize a failover between the primary and the secondary route-server. With the virtual IP-address we have to admit, the failover works perfect! But it only works w

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Alexander Shikoff
On Fri, May 08, 2009 at 01:33:28PM +0100, Stuart Henderson wrote: > On 2009/05/08 14:20, Alexander Shikoff wrote: > > Hi Stuart, > > > > > cuaU# for USB serial ports, cua## for ns16x50-like devices. think those > > > are the only choices for serial ports at the moment. > > > > > > for your puc(4)

Re: No OS safe??

2009-05-08 Thread Felipe Alfaro Solana
On Fri, May 8, 2009 at 2:48 PM, Ian Turner wrote: > On Fri, May 8, 2009 at 8:17 AM, Felipe Alfaro Solana > wrote: >> We could debate why OpenBSD is inherently more secure than Windows (in >> fact we could debate why almost any operating system is inherently >> more secure than Windows). The point

Re: No OS safe??

2009-05-08 Thread Michal
But, that's also up for debate depending on if you interpret "secure" to be synonymous with "secure enough" or with "completely secure." I think you hit the nail on the head there :) -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Ian Turner Se

Re: pf bug

2009-05-08 Thread Cristiano Deana
On 5/8/09 1:24 PM, Karl-Heinz Wild wrote: Hi, This seems to me not valid. from pf.conf(5) : Ranges of addresses are specified by using the `-' operator. For instance: ``10.1.1.10 - 10.1.1.12'' means all addresses from 10.1.1.10 to 10.1.1.12, hence addresses 10.1.1.10, 10.1.1.11, and 10.1.

Re: No OS safe??

2009-05-08 Thread Ian Turner
On Fri, May 8, 2009 at 8:17 AM, Felipe Alfaro Solana wrote: > We could debate why OpenBSD is inherently more secure than Windows (in > fact we could debate why almost any operating system is inherently > more secure than Windows). The point here is OpenBSD is inherently > more secure because of th

Re: Disk enryption or storing data in safe

2009-05-08 Thread Christian Ruesch
Hello, take a look at: mount_vnd(8). Kind regards Christian On Fri, May 08, 2009 at 02:10:13PM +0300, Cem Kayali wrote: > Hello! > > I've just registered to the list and i hope this is the right list to > ask a question about OpenBSD. > > I would like to ask whether OpenBSD has stable impleme

Re: New snapshots -> new installer

2009-05-08 Thread Amarendra Godbole
On Fri, May 8, 2009 at 1:31 PM, Antoine Jacoutot wrote: > On Thu, 7 May 2009, Theo de Raadt wrote: >> useradd really does that? A new group for every user? I think that >> is stupid behaviour. But I will think about if we should this in the >> script. > > I agree, it is stupid behaviour. > > FW

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Stuart Henderson
On 2009/05/08 14:20, Alexander Shikoff wrote: > Hi Stuart, > > On Fri, May 08, 2009 at 10:35:35AM +, Stuart Henderson wrote: > > On 2009-05-08, Alexander Shikoff wrote: > > > I only have two serial ports on motherboard, I see them in dmesg: > > > com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16

Re: No OS safe??

2009-05-08 Thread Felipe Alfaro Solana
On Fri, May 8, 2009 at 12:34 PM, Chris Harries wrote: > This is more of a grammar/wording question, but it does go on to the > security of OS's in general. > > > > Was having a read of this; > > http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html > > > > And the last comment made me

Re: Disk enryption or storing data in safe

2009-05-08 Thread Jacob Yocom-Piatt
Cem Kayali wrote: Thanks for reply... Well, i checked that before, but also heard that 'when a system with a mounted, encrypted virtual filesystem is shutdown uncleanly, the encrypted virtual filesystem's structures get damaged and, since OpenBSD's fsck command will not currently acknowledge

Re: azalia

2009-05-08 Thread Jacob Meuser
On Fri, May 08, 2009 at 09:14:00AM +0200, LEVAI Daniel wrote: > On Thursday 07 May 2009 21.45.00 Jacob Meuser wrote: > > On Thu, May 07, 2009 at 11:14:17AM +0200, LEVAI Daniel wrote: > > > > I put a lot of work into azalia(4) in the last release cycel, and I'd > > > > like to be able to say, when 4

Problems with cas interfaces on sun v440

2009-05-08 Thread Salvatore Sciacco
Hi folks, I have some problems with 4.5 on a sun v440 used as firewall. As soon as the traffic goes up i got a lot of status problems and the connections became unstable (packet loss) i.e.: May 8 10:00:04 sunv440 /bsd: cas0: status=11389096 May 8 10:00:04 sunv440 /bsd: cas1: status=15081090 May

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Henning Brauer
* Alexander Shikoff [2009-05-08 13:39]: > Well, I have no any cy-like card. Why I'm getting cuac# devices in /dev ? they are always there > There are no tty04..tty10 devices in /dev cd /dev; sh MAKEDEV tty04 etc for the others -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Servic

Re: Disk enryption or storing data in safe

2009-05-08 Thread Cem Kayali
Thanks for reply... Well, i checked that before, but also heard that 'when a system with a mounted, encrypted virtual filesystem is shutdown uncleanly, the encrypted virtual filesystem's structures get damaged and, since OpenBSD's fsck command will not currently acknowledge vnd filesystems, t

Re: pf bug

2009-05-08 Thread Karl-Heinz Wild
This seems to me not valid. You can check with l = "{1.1.1.1,1.1.1.2}" block from $l with pfctl -n -v -f file it produce l = "{1.1.1.1,1.1.1.2}" block drop inet from 1.1.1.1 to any block drop inet from 1.1.1.2 to any Try next your example. Karl-Heinz On 08.05.2009, at 12:37, Cristiano Deana

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Alexander Shikoff
Hi Stuart, On Fri, May 08, 2009 at 10:35:35AM +, Stuart Henderson wrote: > On 2009-05-08, Alexander Shikoff wrote: > > I only have two serial ports on motherboard, I see them in dmesg: > > com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo > > com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 1

Disk enryption or storing data in safe

2009-05-08 Thread Cem Kayali
Hello! I've just registered to the list and i hope this is the right list to ask a question about OpenBSD. I would like to ask whether OpenBSD has stable implementation of storing data in encrypted format, similar to FreeBSD geli and especially similar to NetBSD cgd... I have searched throug

Re: svnd is incredible slow... somebody else notice that?

2009-05-08 Thread Thorsten Glaser
Sebastian Rother jpberlin.de> writes: > vnconfig -cK 52527 -S saltfile /dev/sd0k /dev/svnd1c I think that does synchronous writes, even if you mount the svnd device async or softdep, which is why it is so slow. After losing a hard disc image _file_ to fsck on the filesy- stem containing the ima

No OS safe??

2009-05-08 Thread Chris Harries
This is more of a grammar/wording question, but it does go on to the security of OS's in general. Was having a read of this; http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html And the last comment made me think about OpenBSD. The article closes by saying "this shows that no

pf bug

2009-05-08 Thread Cristiano Deana
Hi, i think this is a pf's bug: short description: internal interface with two different ip's in two different lans: 192.168.20.254/24 192.168.21.254/24 They're used as gateway from the two lans. nat rules: every 10 ip's use a different public ip. everithing works fine for the first lan, with

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Stuart Henderson
On 2009-05-08, Alexander Shikoff wrote: > I only have two serial ports on motherboard, I see them in dmesg: > com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo > com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo > > But if I understand correctly they are named as cua0[0..1]. > >> PCI s

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Alexander Shikoff
On Thu, May 07, 2009 at 02:27:51PM -0400, Brynet wrote: > Hi Alexander, Hello, before we continue I'd like to tell that I'm a kind of newbie in OpenBSD. I was using FreeBSD for last 5 years, many things in OpenBSD are almost the same as in FreeBSD (and vice versa) but also there are many differenc

Re: Calomel.org

2009-05-08 Thread Peter N. M. Hansteen
Darrin Chandler writes: > This is true of any sites with OpenBSD help. Sometimes I've found some > info on these sites that's saved me much time, but I'd never take the > info without thinking it through myself, check against the man pages, > FAQ, etc. One common problem is that sites set up by

Re: Improving kernel crypto performance

2009-05-08 Thread Matthew Dempsky
On Fri, May 8, 2009 at 12:37 AM, Matthew Dempsky wrote: > The eBACS project[1] > times a bunch of different algorithms and implementations on a bunch > of different CPUs. [1] http://bench.cr.yp.to

Re: Using ospfd to establish default routes with two outgoing connections (SOLVED)

2009-05-08 Thread carlopmart
Stuart Henderson wrote: On 2009-05-07, carlopmart wrote: Matthew Dempsky wrote: On Thu, May 7, 2009 at 1:47 PM, carlopmart wrote: Which is that sysctl param Stuart?? net.inet.ip.multipath See http://www.openbsd.org/faq/faq6.html#Multipath I have setup this param previously ... And I think

Re: Improving kernel crypto performance

2009-05-08 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 11:29 AM, Matthew Dempsky wrote: > - benchmark aes-ctr performance with current code vs. optimized > assembly code (e.g., just hacking sys/crypto/rijndael.c to use > optimized code); if no significant improvement, abort I didn't have the time to devote to this that I was

Re: azalia

2009-05-08 Thread LEVAI Daniel
On Thursday 07 May 2009 21.45.00 Jacob Meuser wrote: > On Thu, May 07, 2009 at 11:14:17AM +0200, LEVAI Daniel wrote: > > > I put a lot of work into azalia(4) in the last release cycel, and I'd > > > like to be able to say, when 4.6 release comes, that azalia is > > > "completed". > > > > > > by com