Re: ipsec-bridge. which size for mtu?

Joerg Streckfu_ wrote: Hi list, I've made some experiments with ipsec-bridges using gif-interfaces like the explained example in man brconfig. Everything went fine, but sometimes some errors occur. This is my setup: Two boxes, both are running 3.7 generic. Both boxes are connected two the i-n

Re: ath0 troubles

On Tue, Sep 13, 2005 at 08:51:00PM -0500, Matt Brenneke wrote: > > Thanks for the quick answer. Can anyone recomend an Atheros card that > IS currently supported and is still being produced? > the devices listed in ath(4) should work fine (make sure you are looking at a -current page, or use th

Re: Trouble with ath

On Tue, Sep 13, 2005 at 11:47:21PM -0400, Ray Lai wrote: > ath0 at pci1 dev 2 function 0 "Atheros AR5212" rev 0x01: irq 11 > ath0: AR5212 5.9 phy 4.3 rf2112 4.6, WOR4W, address 00:0e:9b:b3:27:d1 ray, i may be wrong (jsg or reyk can correct me) but i believe ath(4) devices with rf2112 radio chips a

Re: 3.8 pre-orders

hmm, on Wed, Sep 14, 2005 at 12:46:00AM -0600, Theo de Raadt said that > Artistically, the release is based on our RAID management efforts. > Thus, we have named the release "The Hackers of the Lost RAID", with > all the artwork and an uncoming song too. indiana jones, now that's a sweet spot!

want to get a zaurus - anybody in japan willing to help?

SL-C3100

Re: want to get a zaurus - anybody in japan willing to help?

sorry, folks!! was too quick on the typing, apparently. I meant to save that as a draft, before typing out the actual email. I have been struggling over this decision (it is somewhat costly) for a while now, but in the end, I still (a) want something that's good, and (b) want something that i can

Re: ip forward / routing question

On Wed, Sep 14, 2005 at 06:25:14AM +0200, Stephan A. Rickauer wrote: > Hello, > > maybe you could help me in resolving a weired problem. I am so close to > subsitute my linux box with openbsd, but I seem to misunderstand something: > > My gateway/firewall has three interfaces: > > em0172.

Re: [OT]: Vulnerability Scanning Frustrations (Or: if you run nessus, how do you make it run faster?)

On 9/14/05, eric <[EMAIL PROTECTED]> wrote: > Scans on a local subnet (nmap -sT -p 1-65535) taking 7 hours or more. use "-T Aggressive"? --knitti

Re: ip forward / routing question

Claudio Jeker wrote: Do you think that private IPs form the 172.16/12 range are routed in the internet? Shit. I have forgotten it only works turning on NAT. Thanks! -- Stephan A. Rickauer Institut f|r Neuroinformatik Universitdt / ETH Z|rich Winterthurerstri

Re: ipsec-bridge. which size for mtu?

Am Mittwoch, den 14.09.2005, 09:09 +0200 schrieb Guido Tschakert: > Hi, > > as you can see in your ifconfig, the mtu of the gif0 interface ist only > 1280. > The mtu of tun0 (i suppose it's your pppo[ea] interface has 1492 as mtu, > but enc0 has 1500 as mtu. This means, that some packets have t

Re: want to get a zaurus - anybody in japan willing to help?

just to say thanks, guys, for all the replies, but as a note, I stay in Singapore, not in Europe, so Wim's kinda out-of-the-way (i'm not in Europe). Appreciate ur help though!! Short of me going down to japan personally to buy the thing (and then ship myself back), is there any other (affordable an

Re: want to get a zaurus - anybody in japan willing to help?

On Wed, 14 Sep 2005, Jeffrey Lim wrote: just to say thanks, guys, for all the replies, but as a note, I stay in Singapore, not in Europe, so Wim's kinda out-of-the-way (i'm not in Europe). Appreciate ur help though!! Short of me going down to japan personally to buy the thing (and then ship myse

Re: OpenBSD website Design.

Hi. > Very well structured. A linear setup so people can read without distractions > from beginning to the end, this will avoid stupid questions. I agree with that. Such structure is much better than current one. -- Slack is GOOD. OBSD better.

Re: want to get a zaurus - anybody in japan willing to help?

Hi, On 2005-09-14 at 19:55, Jeffrey Lim wrote: > Short of me going down to japan > personally to buy the thing (and > then ship myself back), is there any other (affordable and) better way > of getting the thing? There's http://www.pricejapan.com. No personal experience about it, though.

Re: OpenBSD website Design.

--On 14 September 2005 17:54 +0400, slack _usr wrote: Very well structured. A linear setup so people can read without distractions from beginning to the end, this will avoid stupid questions. People who regularly ask stupid questions don't usually read, so this won't help them... UI of this

Re: OpenBSD website Design.

From: Stuart Henderson [mailto:[EMAIL PROTECTED] > --On 14 September 2005 17:54 +0400, slack _usr wrote: > > I agree with that. Such structure is much better than current one. > > homepage layout != website structure Agreed. And current website != broken, either. As was said before, let's forego

Re: 3.8 pre-orders

From: Theo de Raadt [mailto:[EMAIL PROTECTED] > We think that lots of new groovy stuff has made it into this release. > Check out http://www.openbsd.org/38.html for more information. Many exciting changes, of course. I had a discussion with a coworker who is of the opinion that Linux's greatest ad

Re: want to get a zaurus - anybody in japan willing to help?

http://www.openbsd-support.com/ Not sure if they will be able to help you out but they are in Japan ;) Cheers Ste Jones

Re: want to get a zaurus - anybody in japan willing to help?

Hi, I'm looking for something similar. I want a portable or "ultra portable" but would like it to have built-in wireless and decent battery life. Does anyone have any experience with OpenBSD on Sharp's transmeta laptops (MM & MP series) or Fujitsu's? Thanks! Joe On 9/14/05, Jeffrey Lim <[EMAIL

Re: OpenBSD website Design.

I don't read all posts either so I don't fault you. I am one of the ones that said the site *is* in fact broken compared to the new design when you look at it with Lynx. When I am setting up a server (no gui) I use lynx to do my downloads. A web site based on the new design would be an impro

ipsecctl, ipsecadm and friends

On Wed, 14 Sep 2005, Spruell, Darren-Perot wrote: > Incidentally, something I hadn't noticed before was the updates to the IPsec > control framwork - this looks terribly exciting as well. ;) actually, now that we are on the subject, i don't really understand the relation between ipsecadm and ip

Re: ipsecctl, ipsecadm and friends

On Sep 14, 2005, at 11:30 AM, Tamas TEVESZ wrote: On Wed, 14 Sep 2005, Spruell, Darren-Perot wrote: Incidentally, something I hadn't noticed before was the updates to the IPsec control framwork - this looks terribly exciting as well. ;) actually, now that we are on the subject, i don't rea

Re: want to get a zaurus - anybody in japan willing to help?

> sorry, folks!! was too quick on the typing, apparently. I meant to > save that as a draft, before typing out the actual email. > > I have been struggling over this decision (it is somewhat costly) for > a while now, but in the end, I still (a) want something that's good, > and (b) want something

changelog 3.7 -> 3.8 is out of date?

Don't know if this is normal or not. I am not complaining either way. ;) I noticed the following phrase on http://openbsd.org/plus38.html : "The following list sums up (almost) all the changes made up to May 9." So, it is not the complete changelog up to today? Asked differently, is the cite

Something hosing my msdos/FAT32 file system

Hi all. I wonder if anyone has any idea what could be hosing my msdos file system. The file system itself is "necessary" since I occasionally need to dual-boot with windows. However, in this case, I do not believe that windows is causing my problems. The problem that arises is that some dire

Re: changelog 3.7 -> 3.8 is out of date?

> Don't know if this is normal or not. I am not complaining either way. ;) > > I noticed the following phrase on http://openbsd.org/plus38.html : > > "The following list sums up (almost) all the changes made up to May 9." > > So, it is not the complete changelog up to today? Asked differently,

Re: Something hosing my msdos/FAT32 file system

Forgot this: $ grep wd0 /etc/fstab /dev/wd0k /mnt/images msdos rw,nodev,nosuid,noexec,-m=0777,-l 0 0 $ mount | grep wd0 /dev/wd0k on /mnt/images type msdos (NFS exported, local, nodev, noexec, nosuid, mask=0777, long) I (Alexander Hall) wrote: Hi all. I wonder if anyone has any idea what co

Question about altq and states

Hi All, I am new to OpenBSD and I am reading the PF User's guide and I have a novice question. I want to use altq to do Packet Queueing. So, I read this in the guide: When a rule has the keep state option, the first packet matching the rule creates a "state" between the sender and receiver. Now, n

Re: Question about altq and states

--On 14 September 2005 14:01 -0300, Marcos Vinicius Buzo wrote: If I use altq to queue packets and also use "keep stating", would it bypass the queue rules ? "When using the queue keyword with rules that keep state such as: pass in on fxp0 proto t

Two Interfaces and ping(8)

I have machine that has two bge(4) cards. bge0 = 172.81.141.198/27 bge1 = 172.81.141.244/28 Both interfaces are connected to seperate vlans on a switch. My default route is out bge0 to 172.81.141.193. No route is setup on bge1. Internet: DestinationGatewayFlags Refs

using ALTQ on or src_addr?

Misc, How many queues have people run on a small 10mbit net connection with PF/ALTQ? (machine is a P4 3ghz) I ask because queues based on ports (22, 80, etc) seem to have no longer sufficed for our office where someone still manages to hog all the HTTP bandwidth making web surfing miserab

Re: [OT]: Vulnerability Scanning Frustrations (Or: if you run nessus, how do you make it run faster?)

On Wed, 2005-09-14 at 08:26:13 +0200, [EMAIL PROTECTED] proclaimed... > Isn't PF your problem? Do you have it enabled? It might be blocking your > network traffic, causing this behavior. Check your logs and > /etc/pf.conf. I moved to using "set skip on $scan_if" where $scan_if is the scanning int

Re: OpenBSD website Design.

> I don't read all posts either so I don't fault you. I am one of the > ones that said the site *is* in fact broken compared to the new design > when you look at it with Lynx. When I am setting up a server (no gui) > I use lynx to do my downloads. A web site based on the new design would > be a

arplookup: unable to enter address for 0.0.0.0

Heya, On a 3.7 / i386 box (running dhcp/named) with multiple nic cards: arplookup: unable to enter address for 0.0.0.0 I have been seeing these messages in my logs for a few days. Usually followed by a "last message repeated x times" The arp(4) man page says "An IP received on the interface

Re: [OT]: Vulnerability Scanning Frustrations (Or: if you run nessus, how do you make it run faster?)

On Wed 2005.09.14 at 13:38 -0500, eric wrote: > On Wed, 2005-09-14 at 08:26:13 +0200, [EMAIL PROTECTED] proclaimed... > > > Isn't PF your problem? Do you have it enabled? It might be blocking your > > network traffic, causing this behavior. Check your logs and > > /etc/pf.conf. > > I moved to usi

Re: OpenBSD website Design.

"Matthias Herlitzius" <[EMAIL PROTECTED]> wrote: > IMHO a redesign should use XHTML/CSS. Otherwise it would be hard to > realize proper accessibility for lynx :-) Contrary to popular belief, neither lynx nor screenreaders give a damn about buzzword compliance. And using xhtml just because all th

rc.local / snort startup help

Hello all: OBSD3.7 I am trying to start snort from rc.local with this entry if [ -x /usr/local/bin/snort ]; then echo -n ' starting snort...' /usr/local/bin/snort -u sguil -g sguil -l /nsm/em0 -c /etc/snort/em0.snort.conf -U -A none -m 122 -i em0 -D fi After a reboot, the system

Re: OpenBSD website Design.

On Wed, Sep 14, 2005 at 04:15:13PM -0400, Adam wrote: > "Matthias Herlitzius" <[EMAIL PROTECTED]> wrote: > > > IMHO a redesign should use XHTML/CSS. Otherwise it would be hard to > > realize proper accessibility for lynx :-) I just opened it up in lynx and myabe I just have low standards but I'm

Re: Technical OpenBSD kernel documentation.

On Wed, Sep 14, 2005 at 10:03:36AM -0600, Tobias Weingartner wrote: > On Wednesday, September 14, =?ISO-8859-1?Q?Jo=E3o_Salvatti?= wrote: > > > > I'd like a little support from the experts in OpenBSD. I'd like to know > > where I could find a technical OpenBSD kernel documentation. It's > > impleme

Re: arplookup: unable to enter address for 0.0.0.0

On Wed, Sep 14, 2005 at 02:59:14PM -0400, Bill wrote: > Heya, > > On a 3.7 / i386 box (running dhcp/named) with multiple nic cards: > > arplookup: unable to enter address for 0.0.0.0 > > I have been seeing these messages in my logs for a few days. > > Usually followed by a "last message repea

Re: Two Interfaces and ping(8)

On Wed, Sep 14, 2005 at 01:00:34PM -0500, eric wrote: > I have machine that has two bge(4) cards. > > bge0 = 172.81.141.198/27 > bge1 = 172.81.141.244/28 > > Both interfaces are connected to seperate vlans on a switch. > > My default route is out bge0 to 172.81.141.193. No route is setup on bge

Re: Two Interfaces and ping(8)

On Wed, 2005-09-14 at 23:31:25 +0200, Claudio Jeker proclaimed... > The man page is not 100% correct for the unicast case. > In fact in the unicast case ping just bind()s to the specified address but > that does not force the packets to go through that interface -- a normal > route lookup is used

[EMAIL PROTECTED]: Re: rc.local / snort startup help]

> Hello all: hi > > OBSD3.7 > > I am trying to start snort from rc.local with this entry > > if [ -x /usr/local/bin/snort ]; then > echo -n ' starting snort...' > /usr/local/bin/snort -u sguil -g sguil -l /nsm/em0 -c > /etc/snort/em0.snort.conf -U -A none -m 122 -i em0 -D Is a EO

shell script generator?

i am relatively lazy and there are a number of configurations (e.g. mailserver, backup server, etc.) which i would like to generate shell scripts for. i have thought about making these scripts for quite a while, but i have been reticent to invest the time required to make the shell script by hand.

Re: OpenBSD website Design.

2005/9/14, Adam <[EMAIL PROTECTED]>: > "Matthias Herlitzius" <[EMAIL PROTECTED]> wrote: > > > IMHO a redesign should use XHTML/CSS. Otherwise it would be hard to > > realize proper accessibility for lynx :-) > > Contrary to popular belief, neither lynx nor screenreaders give a damn > about buzzwo

Re: arplookup: unable to enter address for 0.0.0.0

On Wed, 14 Sep 2005 23:15:07 +0200 Claudio Jeker <[EMAIL PROTECTED]> wrote: > On Wed, Sep 14, 2005 at 02:59:14PM -0400, Bill wrote: > > Heya, > > > > On a 3.7 / i386 box (running dhcp/named) with multiple nic cards: > > > > arplookup: unable to enter address for 0.0.0.0 > > > > I have been seei

Re: shell script generator?

does there exist a program that can capture all the various commands and text file edits i make in the process of configuring an openbsd install and replay them in the order they were issued? i know about the script command, but it doesn't quite do what i'd like it to, as i'd like to be able to re

Re: arplookup: unable to enter address for 0.0.0.0

On Wed, Sep 14, 2005 at 05:59:52PM -0400, Bill wrote: > On Wed, 14 Sep 2005 23:15:07 +0200 > Claudio Jeker <[EMAIL PROTECTED]> wrote: > > > On Wed, Sep 14, 2005 at 02:59:14PM -0400, Bill wrote: > > > Heya, > > > > > > On a 3.7 / i386 box (running dhcp/named) with multiple nic cards: > > > > > >

Re: shell script generator?

On Wed, 2005-09-14 at 16:52 -0500, [EMAIL PROTECTED] wrote: > does there exist a program that can capture all the various > commands and text file edits i make in the process of > configuring an openbsd install and replay them in the order > they were issued? i know about the script command, but it

Re: Two Interfaces and ping(8)

On Wed, Sep 14, 2005 at 04:40:11PM -0500, eric wrote: > On Wed, 2005-09-14 at 23:31:25 +0200, Claudio Jeker proclaimed... > > > The man page is not 100% correct for the unicast case. > > In fact in the unicast case ping just bind()s to the specified address but > > that does not force the packets

Re: Trouble with ath

On 9/14/05, Jason McIntyre <[EMAIL PROTECTED]> wrote: > On Tue, Sep 13, 2005 at 11:47:21PM -0400, Ray Lai wrote: > > ath0 at pci1 dev 2 function 0 "Atheros AR5212" rev 0x01: irq 11 > > ath0: AR5212 5.9 phy 4.3 rf2112 4.6, WOR4W, address 00:0e:9b:b3:27:d1 > > ray, i may be wrong (jsg or reyk can co

pfctl -s labels

hi there, would it be a bad idea to add a short header/legend about what the numbers mean? i know the hardcore pf people know it by heart, but for me, it means a trip to the man page _every_ time ;-) and for maintaining the simple format for processing those numbers by scripts, it could be displ

Re: shell script generator?

--On 14 September 2005 16:52 -0500, [EMAIL PROTECTED] wrote: i am relatively lazy and there are a number of configurations (e.g. mailserver, backup server, etc.) which i would like to generate shell scripts for. i have thought about making these scripts for quite a while, but i have been reticen

Cisco VPN client (using .pcf and RSA SecurId card)

Hello, I login at work using a Cisco VPN client on Windows or Linux and entering a passcode generated by an RSA SecurId card. The connection information seems to be contained in a .pcf file: [main] Description=XXX XXX Host=XXX.XXX.XX.XXX AuthType=1 GroupName=XXX EnableISPConnect=0 ISPCo

twe on AMD64?

Is anybody using the twe (3ware Escalade IDE RAID controller) driver in 3.7 AMD64? It is not compiled into the AMD64 installation kernel, and before I spend the time building a custom installation image, I would like to know whether it even compiles and works on AMD64. Unfortunately I do not have a

Re: want to get a zaurus - anybody in japan willing to help?

Good Day! On Wed, Sep 14, 2005 at 07:55:26PM +0800, Jeffrey Lim wrote: > just to say thanks, guys, for all the replies, but as a note, I stay > in Singapore, not in Europe, so Wim's kinda out-of-the-way (i'm not in > Europe). Appreciate ur help though!! Short of me going down to japan > personally

Lost connections with mysql-server-4.0.23p1

I've got an OpenBSD 3.7 server with mysql-server-4.0.23p1.tgz installed from packages. Once a week or so, the mysql server will stop taking queries, commands, etc. Applications that rely on the database will complain of having lost the connection. Attempting any mysql or mysqladmin comma

alpha panic; cpu_initclocks: no clock attached

hi, i ultimately wanted to try martin reindl's alpha patch on my pws500au (even if i wouldn't have scored extra anyway), when i realized my alpha was hosed, so i grabbed the sept 10 snapshot, installed it fine, cvs'd src/, compiled a generic kernel, and upon reboot: [...] sd0 at scsibus1 targ 0 l

Re: alpha panic; cpu_initclocks: no clock attached

On Thu, Sep 15, 2005 at 02:15:58AM +0200, Tamas TEVESZ wrote: > hi, > > i ultimately wanted to try martin reindl's alpha patch on my pws500au > (even if i wouldn't have scored extra anyway), when i realized my > alpha was hosed, so i grabbed the sept 10 snapshot, installed it fine, > cvs'd src/, c

USB ports not working on Toshiba Satellite

Hello, Firstly, I've been an avid OpenBSD user and advocate for many years now and I'm truely addidcted to this OS... I love it. I had a Dell Latitude and it worked beautifully with OpenBSD but unfortunately it died. My wife kindly bought me a new $2,000 Toshiba SatelliteM60 by surprise but

Re: alpha panic; cpu_initclocks: no clock attached

On Thu, 15 Sep 2005, Martin Reindl wrote: > > i ultimately wanted to try martin reindl's alpha patch on my pws500au > > (even if i wouldn't have scored extra anyway), when i realized my > > alpha was hosed, so i grabbed the sept 10 snapshot, installed it fine, > > cvs'd src/, compiled a generi

USB unsupported on Toshiba Satellite

Hello, Firstly, I've been an avid OpenBSD user and advocate for many years now and I'm truely addidcted to this OS... I love it. I had a Dell Latitude and it worked beautifully with OpenBSD but unfortunately it died. My wife kindly bought me a new $2,000 Toshiba SatelliteM60 by surprise but

Re: alpha panic; cpu_initclocks: no clock attached

On Thu, Sep 15, 2005 at 02:54:44AM +0200, Tamas TEVESZ wrote: > On Thu, 15 Sep 2005, Martin Reindl wrote: > > > > i ultimately wanted to try martin reindl's alpha patch on my pws500au > > > (even if i wouldn't have scored extra anyway), when i realized my > > > alpha was hosed, so i grabbed the

Re: want to get a zaurus - anybody in japan willing to help?

On Wed, 14 Sep 2005, Joe . wrote: > I'm looking for something similar. I want a portable or "ultra > portable" but would like it to have built-in wireless and decent > battery life. Does anyone have any experience with OpenBSD on Sharp's > transmeta laptops (MM & MP series) or Fujitsu's? the fuji

Re: Something hosing my msdos/FAT32 file system

On Wed, 14 Sep 2005, Alexander Hall wrote: > I think that bad stuff happens when I move directories around. Windows > checkdisk (at boot time) once complained about a lot of "." and ".." directory > entried that were invalid. I cannot recall if this was done remotely using > shlight or nfs, or loc

Forwarding packets out the interface on which they arrive

Is there a trick to getting OpenBSD to forward packets back out the interface on which they arrive? I have an interface with two addresses - one private, one public. The private address is the gateway for a host, the public address connects to a cable modem. I'm unable to get the host's packets

Re: Technical OpenBSD kernel documentation.

On Wed, 14 Sep 2005, Bernd Schoeller wrote: > On Wed, Sep 14, 2005 at 10:03:36AM -0600, Tobias Weingartner wrote: > > > > Anything not covered by man pages is covered by the source. > > This is nicely said, but ... > > reading source code (any language) of a complex system is very > difficult wi

Re: shell script generator?

On Wed, 14 Sep 2005 16:52:29 -0500 <[EMAIL PROTECTED]> wrote: > 1) make package/port list in a text file > 2) run script in one terminal window to capture all the > extraneous configuration-related executables i have to run > 3) take diffs of my final configuration file contents against > the defa

Re: want to get a zaurus - anybody in japan willing to help?

On 9/14/05, Ted Unangst <[EMAIL PROTECTED]> wrote: > the fujitsu lifebook p2000 models work (early ones are best; they added > acpi or something and dicked up usb in later models from what i've > gathered). p1000 should be the same. while it's a lot faster than a > zaurus, it's nowhere close to

Re: Two Interfaces and ping(8)

On Thu, 2005-09-15 at 00:27:58 +0159, Claudio Jeker proclaimed... > As I said it is not possible to force a outgoing interface without adding > a host route to the destionation. The only way to do this is using bpf. > For local networks you can use SO_DONTROUTE but this does not work for non > loc

Re: OpenBSD website Design.

I guess I just feel like it would be nice if I saw some sort of header and text saying what the page was in stead of a list of links. This is what I see in Lynx. Yeah, it does say "About OpenBSD" but with the openbsd/openssh web sites looking so much alike in lynx, I always have to scroll down

Re: rc.local / snort startup help

> Andreas: > > Thank you. I think the break was an email thing, in the file it is all > listed on one line. If you can imagine I can use the line in rc.local > while I'm logged in ssh (root) and it works fine. Just not so fine in > rc.local. > > Could it be running and not show up with ps -al?

Re: alpha panic; cpu_initclocks: no clock attached

> i ultimately wanted to try martin reindl's alpha patch on my pws500au > (even if i wouldn't have scored extra anyway), when i realized my > alpha was hosed, so i grabbed the sept 10 snapshot, installed it fine, > cvs'd src/, compiled a generic kernel, and upon reboot: This problem is caused by a