Re: kernel/6043: panic: rtfree 2

2009-02-25 Thread Insan Praja SW
On Wed, 25 Feb 2009 03:12:09 +0700, Claudio Jeker wrote: On Tue, Feb 24, 2009 at 08:37:22AM +0700, Insan Praja SW wrote: On Tue, 24 Feb 2009 06:20:05 +0700, Claudio Jeker wrote: Could you please run with the following diff and report if you still hit the panics. It seems some drivers (m

Re: TBB on OBSD

2009-02-25 Thread Pierre Riteau
On 25 fivr. 09, at 07:17, Jack Woehr wrote: Anyone working with TBB ( http://www.threadingbuildingblocks.org/ ) on OpenBSD? http://marc.info/?l=openbsd-ports&m=122559493912076&w=2

Re: get php uptime function out of apache chroot jail?

2009-02-25 Thread Vadim Zhukov
On 25 February 2009 c. 08:51:20 Jerome Santos wrote: > hello, I want to put a php script in a site on an openbsd 4.2 > webserver. From what I understand because apache is chrooted, a > function that uses an exec to a system call cannot work. > ie. > $s = explode( " ", exec("/var/run/usr/bi

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread David Vasek
On Tue, 24 Feb 2009, Dieter wrote: http://linuxdevices.com/news/NS9634061300.html This looks promising: a $100 ($50 in volume) 5 Watt computer. 1.2GHz CPU, 512MB each of RAM and Flash Marvell 88F6281 "Kirkwood" SoC gigabit Ethernet and USB 2.0 ports Looks like the SoC also has a 2nd Ethernet p

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Lars Noodén
David Vasek wrote: > What would be firewire good for? Data transfer such as for full backups or cloning or audio/video. Haven't tested it yet on OpenBSD, I still have USB-only / ethernet-base storage for those systems. Subjectively, I find FW to be much faster than USB2 on my hardware using OS X

Re: xenocara - autoconf magic incantation?

2009-02-25 Thread J.C. Roberts
On Tue, 24 Feb 2009 22:16:10 +0100 Matthieu Herrb wrote: > On Tue, Feb 24, 2009 at 9:20 PM, J.C. Roberts > wrote: > > I'm testing out the v2.6.1 intel(4) driver requested here: > > http://marc.info/?l=openbsd-tech&m=123307709522306&w=2 > > > > In my Xorg.0.log I'm getting the mysterious error: >

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread David Vasek
On Wed, 25 Feb 2009, Lars Noodin wrote: > David Vasek wrote: >> What would be firewire good for? > > Data transfer such as for full backups or cloning or audio/video. > Haven't tested it yet on OpenBSD, I still have USB-only / ethernet-base > storage for those systems. Subjectively, I find FW to

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Rod Whitworth
On Wed, 25 Feb 2009 12:26:05 +0200, Lars Nood+*n wrote: >David Vasek wrote: >> What would be firewire good for? > >Data transfer such as for full backups or cloning or audio/video. >Haven't tested it yet on OpenBSD, I still have USB-only / ethernet-base >storage for those systems. Subjectively, I

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Lars Noodén
David Vasek wrote: > 1) Firewire controller in your machine is a realiable path to have it > cracked/crashed at any time (on most of the platforms). Sources please, regarding cracking. As far as stability goes, I find the USB connections somewhat unreliable. > 2) Firewire is not supported on Ope

Re: NAT, Firewall & pf

2009-02-25 Thread David Vasek
On Tue, 24 Feb 2009, Hilco Wijbenga wrote: 2009/2/23 Jason Dixon : ## 00 ext_if = "sk0" 01 int_if = "sk1" 02 03 set skip on lo 04 05 scrub in 06 07 nat on $ext_if from $int_if:network to any -> ($ext_if:0) 08 09 block in log all 10 pass in

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Pierre Riteau
On Wed, Feb 25, 2009 at 11:26 AM, Lars Noodin wrote: > David Vasek wrote: >> What would be firewire good for? > > Data transfer such as for full backups or cloning or audio/video. > Haven't tested it yet on OpenBSD, I still have USB-only / ethernet-base > storage for those systems. Subjectively,

Foreign ip address in routing table?

2009-02-25 Thread Cristiano Deana
Hi, i have a proxy server (4.4 amd64 + squid) with foreign ip addresses in routing table. example: # uname -a OpenBSD proxy.cs.intra 4.4 GENERIC#1021 i386 # netstat -nr -f inet Routing tables Internet: DestinationGatewayFlags Refs Use Mtu Prio Iface default

Re: packets redirected to loopback never appear in tcpdump

2009-02-25 Thread Gregory Edigarov
Stuart Henderson wrote: On 2009-02-24, Gregory Edigarov wrote: Is this a bug of feature? the test case: # ifconfig lo1 192.168.0.1 up # ping 192.168.0.1 64 bytes from 192.168.0.1: icmp_seq=0 ttl=255 time=0.200 ms 64 bytes from 192.168.0.1: icmp_seq=1 ttl=255 time=0.111 ms 64 bytes from 192

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread David Vasek
On Wed, 25 Feb 2009, Lars Noodin wrote: > David Vasek wrote: >> 1) Firewire controller in your machine is a realiable path to have it >> cracked/crashed at any time (on most of the platforms). > > Sources please, regarding cracking. With firewire OHCI controller you have you physical RAM open. Th

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Lars Noodén
Rod Whitworth wrote: > And you are aware of how insecure firewire is, I hope? Yeah, somewhat. > With physical access admittedly Pretty much anything is possible with physical access and some time. > ... but it does DMA transfers without talking to the OS etc. It appears that could be turned

OpenOSPFd configure

2009-02-25 Thread Andrew R.
I'am configuring ospfd on FreeBSD 6.4 I want transfer, for exmple x.x.x.0/24, network to cisco routers with the next config: # cat /usr/local/etc/ospfd.conf # Global Configuration router-id yy.yy.yy.yy redistribute zz.zz.zz.0/27 (ospfd host and cisco network) redistribute x.x.x.0/24 area 0.0.0.

Re: 1.2GHz US$99 ARM wall plug

2009-02-25 Thread Nick Holland
Dave Wilson wrote: > http://linuxdevices.com/news/NS9634061300.html Marvell Semiconductor, eh? > They look rather nifty. > > Even the hardware design is to be released under some sort of open license. a company with a spotty history on "open" -- see malo(4) ("spotty" is giving them a benefit of

Re: BCM4311

2009-02-25 Thread Ted Unangst
On Wed, Feb 25, 2009 at 2:41 AM, Saifi Khan wrote: > So, what is the plan for openBSD now ? Are we not going to have > BCM43xx driver at all ? Take it up with broadcom. Why is it our fault if they don't document their crap?

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Hannah Schroeter
Hi! On Wed, Feb 25, 2009 at 12:44:29PM +0200, Lars Noodin wrote: >As far as stability goes, I find the USB connections somewhat unreliable. For me it just works (external USB2 hard disk). Kind regards, Hannah.

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Hannah Schroeter
Hi! On Wed, Feb 25, 2009 at 12:04:01PM +0100, David Vasek wrote: >[...] >Perhaps. In case of firewire it depends on proper design of a connected >device too, but I meant stability of your machine/OS. A device connected >over firewire can do anything it wants with your machine, even crash it >u

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread David Vasek
On Wed, 25 Feb 2009, Hannah Schroeter wrote: Hi! On Wed, Feb 25, 2009 at 12:04:01PM +0100, David Vasek wrote: [...] Perhaps. In case of firewire it depends on proper design of a connected device too, but I meant stability of your machine/OS. A device connected over firewire can do anything

Re: kernel freeze randomly

2009-02-25 Thread Andreas Kahari
Will disabling apmd solve this issue? I'm seeing freezes on my Lenovo X61s. The machine was stable for a few weeks (or so) until Theo backed out that backed-out commit on acpicpu.c on Monday (23rd). Andreas 2009/2/13 Dan Harnett : > On Fri, Feb 13, 2009 at 11:46:37AM -0600, Marco Peereboom wrote

Re: kernel freeze randomly

2009-02-25 Thread Marco Peereboom
apmd will only make it worse. Plugging in the power cable under io is an easy way to reproduce the issue. On Wed, Feb 25, 2009 at 01:36:16PM +, Andreas Kahari wrote: > Will disabling apmd solve this issue? I'm seeing freezes on my Lenovo > X61s. The machine was stable for a few weeks (or so)

Re: kernel freeze randomly

2009-02-25 Thread Robert
On Wed, 25 Feb 2009 13:36:16 + Andreas Kahari wrote: > Will disabling apmd solve this issue? I'm seeing freezes on my Lenovo > X61s. The machine was stable for a few weeks (or so) until Theo backed > out that backed-out commit on acpicpu.c on Monday (23rd). > > Andreas Try building kernel

Chemnitzer Linuxtage 2009

2009-02-25 Thread Bernd Ahlers
Hey! There will be an OpenBSD booth at the "Chemnitzer Linuxtage 2009" in Chemnitz, Germany. If there are any locals interested in helping at the booth please contact be...@openbsd.org or f...@openbsd.org privately. Thanks! Regards, Bernd

Re: kernel freeze randomly

2009-02-25 Thread Andreas Kahari
2009/2/25 Robert : > On Wed, 25 Feb 2009 13:36:16 + > Andreas Kahari wrote: > >> Will disabling apmd solve this issue? I'm seeing freezes on my Lenovo >> X61s. The machine was stable for a few weeks (or so) until Theo backed >> out that backed-out commit on acpicpu.c on Monday (23rd). >> >> A

Re: OpenBSD hosting

2009-02-25 Thread Marcos Laufer
Dear Friedrich, We offer dedicated servers at ipv4.net If you are interested let me know Regards, Marcos Laufer Francisco Valladolid Hdez. wrote: > Hi > > Consider www.geekisp.com I have a account with Dave for almost, three years > without problems. > > www.rootr.net can be a nice solution. >

Re: OpenBSD hosting

2009-02-25 Thread ben wilber
On Wed, Feb 25, 2009 at 01:05:17PM -0200, Marcos Laufer wrote: > Dear Friedrich, > > We offer dedicated servers at ipv4.net > If you are interested let me know Does ipv4.net offer ipv6?

Re: kernel freeze randomly

2009-02-25 Thread Ted Unangst
On Wed, Feb 25, 2009 at 9:22 AM, Andreas Kahari wrote: > That's exactly what I have as well in my dmesg with a kernel built > from today's sources, well, almost: > > cpu0: unknown Enhanced SpeedStep CPU, msr 0x0615081906000615 > cpu0: using only highest and lowest power states > cpu0: Enhanced Spe

Re: kernel/6043: panic: rtfree 2

2009-02-25 Thread Insan Praja SW
Hi Claudio and Misc@, On Wed, 25 Feb 2009 03:12:09 +0700, Claudio Jeker wrote: On Tue, Feb 24, 2009 at 08:37:22AM +0700, Insan Praja SW wrote: On Tue, 24 Feb 2009 06:20:05 +0700, Claudio Jeker wrote: Could you please run with the following diff and report if you still hit the panics. I

Re: 1.2GHz US$99 ARM wall plug

2009-02-25 Thread KammyDoe
If you do find one in the UK, please let us know! Or at any rate, could you fire me a mail? :P I too am UK based. The only placse I can think that may sell them anytime soon are possibly Maplins or MicroAnvika. :| But they don't have a tendency to be cheap. I hope we see it on PCWorld's shelv

Re: Foreign ip address in routing table?

2009-02-25 Thread Claudio Jeker
On Wed, Feb 25, 2009 at 11:43:36AM +0100, Cristiano Deana wrote: > Hi, > > i have a proxy server (4.4 amd64 + squid) with foreign ip addresses in > routing table. > > example: > > # uname -a > OpenBSD proxy.cs.intra 4.4 GENERIC#1021 i386 > # netstat -nr -f inet > Routing tables > > Internet: >

Re: -CURRENT intel(4) problem

2009-02-25 Thread J.C. Roberts
On Tue, 24 Feb 2009 23:38:43 + Owain Ainsworth wrote: > > I just singed up for freedesktop.org this morning, and I'm > > collecting the needed Xorg.0.log's with full debug info, > > descriptions and whatnot. It's going to take quite a while > > experiment with it and write up all the buggy be

Re: keyboard access issue

2009-02-25 Thread Saifi Khan
On Mon, Feb 23, 2009 at 3:40 AM, Saifi Khan wrote: > Hi all: > > i'm facing keyboard access issue when trying to install OpenBSD 4.4 on > Intel, Compaq laptop. > Please find attached the photograph of the dmesg output. > > Both FreeBSD 7.1 and Gentoo Linux 2008.0r2 work fine on the system. > > Her

Re: keyboard access issue

2009-02-25 Thread Saifi Khan
Thanks Jens. I just uploaded the image at http://tinypic.com/view.php?pic=30b0bvl&s=5 -- thanks Saifi. On Wed, Feb 25, 2009 at 7:02 PM, ropers wrote: > 2009/2/25 Saifi Khan : >> Folks, any suggestions on how the keyboard issue can be fixed ? >> I did send out a screenshot of the dmesg output.

Re: keyboard access issue

2009-02-25 Thread Saifi Khan
Hi all: Here is the link to the openbsd dmesg output image. http://tinypic.com/view.php?pic=30b0bvl&s=5 -- thanks Saifi. On Mon, Feb 23, 2009 at 3:40 AM, Saifi Khan wrote: > Hi all: > > i'm facing keyboard access issue when trying to install OpenBSD 4.4 on > Intel, Compaq laptop. > Please fi

Re: OpenOSPFd configure

2009-02-25 Thread Claudio Jeker
On Wed, Feb 25, 2009 at 02:04:32PM +0200, Andrew R. wrote: > I'am configuring ospfd on FreeBSD 6.4 > > I want transfer, for exmple x.x.x.0/24, network to cisco routers with the > next config: > > # cat /usr/local/etc/ospfd.conf > # Global Configuration > router-id yy.yy.yy.yy > > redistribute zz

pf & relayd load balancing

2009-02-25 Thread Brian McCann
Hi all. I just recently starting using OpenBSD 4.4 since I wanted to use "pf" for a firewall. I usually use FreeBSD, but had problems with their implementation of relayd. Anyway...here's my problem. I'm running 2 boxes, using CARP and pfsync for failover, and relayd for load balancing incoming

Install 4.4 Sparc64 on SunFire V120

2009-02-25 Thread new_guy
Hi guys. I'm helping a friend install 4.4 (Sparc64) on this SunFire V120 he got for free :) It's a very nice box with a working Solaris install. It boots the install.iso and proceeds to install, but when we get to the point of selecting a root disk... the only option we have is [done]. OpenBSD see

Re: Install 4.4 Sparc64 on SunFire V120

2009-02-25 Thread Brian Keefer
On Feb 25, 2009, at 12:18 PM, new_guy wrote: Hi guys. I'm helping a friend install 4.4 (Sparc64) on this SunFire V120 he got for free :) It's a very nice box with a working Solaris install. It boots the install.iso and proceeds to install, but when we get to the point of selecting a root d

System security question

2009-02-25 Thread Jean-Francois
Hi All, I actually built the following system : - OpenBSD running on a standard AMD platform - This box is actually used as firewall - This box is also used as webserver - This box is finally used as local shared drives via NFS file but only open to subnetwork through PF Assuming that subnetwork

Re: Install 4.4 Sparc64 on SunFire V120

2009-02-25 Thread Daniel Ouellet
new_guy wrote: Hi guys. I'm helping a friend install 4.4 (Sparc64) on this SunFire V120 he got for free :) It's a very nice box with a working Solaris install. It boots the install.iso and proceeds to install, but when we get to the point of selecting a root disk... the only option we have is [d

You've received A Hallmark Valentine-Card!

2009-02-25 Thread hallmark.com
Hallmark.comShop OnlineHallmark MagazineE-Cards & MoreAt Gold Crown You have recieved A Hallmark E-Card. Hello! You have recieved a Hallmark E-Card. To see it, click here, There's something special about that E-Card feeling. We invite you to make a friend's day and send one. Hope to see you s

Re: 1.2GHz US$99 ARM wall plug

2009-02-25 Thread Dave Wilson
Nick Holland wrote: > Dave Wilson wrote: >> http://linuxdevices.com/news/NS9634061300.html > > Marvell Semiconductor, eh? > >> They look rather nifty. >> >> Even the hardware design is to be released under some sort of open license. > > a company with a spotty history on "open" -- see malo(4) >

New OpenOffice.org port build box needed

2009-02-25 Thread Mitja Muženič
A few days ago Robert Nagy (the OpenOffice.org port maintainer) added his request for a build box to www.openbsd.org/want.html. OpenOffice.org 3 is a huge port to build and maintain, and a single build takes over 12 hours on the machine that Robert currently has and cannot afford to run anymore d

Re: Install 4.4 Sparc64 on SunFire V120

2009-02-25 Thread new_guy
Brian Keefer wrote: > > That's weird. I have a nearly identical machine with almost the same > configuration. The only difference without checking dmesg line-by- > line is that mine has one disk drive rather than two. I'll check my > dmesg when I get home. > Thanks for the help guys. We

Re: New OpenOffice.org port build box needed

2009-02-25 Thread Marco Peereboom
Even though this reminder is appreciated I am currently working with Robert on an alternate solution to get him a fast build box. We really need donation funds to go to CVS & Network upgrade at this time. Don't be shy to shoot me an email if you have any questions. On Wed, Feb 25, 2009 at 10:51

Re: System security question

2009-02-25 Thread Felipe Alfaro Solana
On Wed, Feb 25, 2009 at 10:08 PM, Jean-Francois wrote: > Hi All, > > I actually built the following system : > > - OpenBSD running on a standard AMD platform > - This box is actually used as firewall > - This box is also used as webserver > - This box is finally used as local shared drives via NFS

Re: keyboard access issue

2009-02-25 Thread ropers
> On Mon, Feb 23, 2009 at 3:40 AM, Saifi Khan wrote: >> Hi all: >> >> i'm facing keyboard access issue when trying to install OpenBSD 4.4 on >> Intel, Compaq laptop. >> Both FreeBSD 7.1 and Gentoo Linux 2008.0r2 work fine on the system. >> >> Here is the information that i culled from the Linux e

Re: TNC Packet Radio for OpenBSD

2009-02-25 Thread Joseph C. Bender
Marc Balmer wrote: I am using a TNC7multi. http://nt-g.de/de/tnc7multi/tnc7multi.php5 The venerable KPC-3 from Kantronics is always a good choice as well. http://www.kantronics.com/products/kpc3.html -- Joseph Bender N8XRE

Super Προσφορά APC UPS

2009-02-25 Thread Genco Power SA (Marketing)
Untitled Document Newsletter Vebqouaq_ou 2009 Diav^lisg & Tewmokoc_a APC Smart - UPS SC 1000VA 230V 2U Rackmount/Tower APC Smart-UPS SC, 600 Watts/1000VA, Input 230V/Output 230V, Rack Height 2U INCLUDES: CD with software, Documentation CD, Rack Mounting brackets, Smart UPS signallin

Re: System security question

2009-02-25 Thread ropers
2009/2/25 Jean-Francois : > -> Would you please confirm that hacking is almost impossible ? > -> Would you confirm any personnal datas hosted on server are safe as > long as the (subnet is not compromised by false manipulation of course) I hate to state the obvious, but no one will be able to give

Re: TNC Packet Radio for OpenBSD

2009-02-25 Thread ropers
2009/2/25 Joseph C. Bender : > Marc Balmer wrote: >> >> I am using a TNC7multi. http://nt-g.de/de/tnc7multi/tnc7multi.php5 >> > > The venerable KPC-3 from Kantronics is always a good choice as well. > > http://www.kantronics.com/products/kpc3.html Apologies if this is very naive and thoroughly un

Re: NAT, Firewall & pf

2009-02-25 Thread ropers
2009/2/25 patrick keshishian : > On Tue, Feb 24, 2009 at 9:48 PM, Hilco Wijbenga > wrote: >> 2009/2/23 Jason Dixon : >>> ## >>> 00 ext_if = "sk0" >>> 01 int_if = "sk1" >>> 02 >>> 03 set skip on lo >>> 04 >>> 05 scrub in >>> 06 >>> 07 nat on $

Re: NAT, Firewall & pf

2009-02-25 Thread patrick keshishian
On Wed, Feb 25, 2009 at 4:07 PM, ropers wrote: > 2009/2/25 patrick keshishian : >> On Tue, Feb 24, 2009 at 9:48 PM, Hilco Wijbenga >> wrote: >>> 2009/2/23 Jason Dixon : ## 00 ext_if = "sk0" 01 int_if = "sk1" 02 03 se

Re: xenocara - autoconf magic incantation?

2009-02-25 Thread Owain Ainsworth
On Wed, Feb 25, 2009 at 01:07:22AM -0800, J.C. Roberts wrote: > On Tue, 24 Feb 2009 22:16:10 +0100 Matthieu Herrb > wrote: > > > On Tue, Feb 24, 2009 at 9:20 PM, J.C. Roberts > > wrote: > > > I'm testing out the v2.6.1 intel(4) driver requested here: > > > http://marc.info/?l=openbsd-tech&m=1233

Re: NAT, Firewall & pf

2009-02-25 Thread Rod Whitworth
On Wed, 25 Feb 2009 16:39:08 -0800, patrick keshishian wrote: >You need states created for traffic passing through the pf firewall, >specifically through the $ext_if to allow packets flowing back in, >otherwise line 09 blocks those packets. I don't see where states would >get created for outbound

Re: kernel freeze randomly

2009-02-25 Thread Dan Harnett
On Wed, Feb 25, 2009 at 10:17:09AM -0500, Ted Unangst wrote: > On Wed, Feb 25, 2009 at 9:22 AM, Andreas Kahari > wrote: > > That's exactly what I have as well in my dmesg with a kernel built > > from today's sources, well, almost: > > > > cpu0: unknown Enhanced SpeedStep CPU, msr 0x061508190600061

Re: NAT, Firewall & pf

2009-02-25 Thread Jason Dixon
On Wed, Feb 25, 2009 at 04:39:08PM -0800, patrick keshishian wrote: > On Wed, Feb 25, 2009 at 4:07 PM, ropers wrote: > > 2009/2/25 patrick keshishian : > >> On Tue, Feb 24, 2009 at 9:48 PM, Hilco Wijbenga > >> wrote: > >>> 2009/2/23 Jason Dixon : > ###

Re: NAT, Firewall & pf

2009-02-25 Thread patrick keshishian
On Wed, Feb 25, 2009 at 5:15 PM, Jason Dixon wrote: > On Wed, Feb 25, 2009 at 04:39:08PM -0800, patrick keshishian wrote: >> On Wed, Feb 25, 2009 at 4:07 PM, ropers wrote: >> > 2009/2/25 patrick keshishian : >> >> On Tue, Feb 24, 2009 at 9:48 PM, Hilco Wijbenga >> >> wrote: >> >>> 2009/2/23 Jaso

Re: kernel freeze randomly

2009-02-25 Thread Dan Harnett
On Wed, Feb 25, 2009 at 10:17:09AM -0500, Ted Unangst wrote: > On Wed, Feb 25, 2009 at 9:22 AM, Andreas Kahari > wrote: > > That's exactly what I have as well in my dmesg with a kernel built > > from today's sources, well, almost: > > > > cpu0: unknown Enhanced SpeedStep CPU, msr 0x061508190600061

Re: kernel freeze randomly

2009-02-25 Thread Theo de Raadt
>It's a shame I don't have this kind of luck with lottery tickets. I'm >able to reproduce the hang still using both -current and the latest >amd64 snap. To reproduce, I just continuously scp a large file to >another machine while 'apmd -C' is running. 'apmd -L', 'apmd -H', or >not running apmd w

Re: kernel freeze randomly

2009-02-25 Thread Dan Harnett
On Wed, Feb 25, 2009 at 08:36:22PM -0500, Dan Harnett wrote: > > I'm 2 for 2. I can reproduce the hang on my Lenovo ThinkPad T61 as > well. I'm gonna go hit up a casino. Using em0, btw. pf disabled. em0: flags=8843 mtu 1500 lladdr 00:1c:25:78:07:ba priority: 0 groups: e

Re: NAT, Firewall & pf

2009-02-25 Thread Jason Dixon
On Wed, Feb 25, 2009 at 05:39:31PM -0800, patrick keshishian wrote: > On Wed, Feb 25, 2009 at 5:15 PM, Jason Dixon wrote: > > On Wed, Feb 25, 2009 at 04:39:08PM -0800, patrick keshishian wrote: > >> On Wed, Feb 25, 2009 at 4:07 PM, ropers wrote: > >> > 2009/2/25 patrick keshishian : > >> >> On Tu

Re: NAT, Firewall & pf

2009-02-25 Thread Rod Whitworth
On Wed, 25 Feb 2009 17:39:31 -0800, patrick keshishian wrote: >The floating states based on line 10 would be for pre-NAT sources on >$int_if and wouldn't match any inbound packets on $ext_if. Unless I'm >misunderstanding how NAT works with pf, there are no pass out rules >that would create states

Re: kernel freeze randomly

2009-02-25 Thread Ted Unangst
On Wed, Feb 25, 2009 at 8:08 PM, Dan Harnett wrote: > It's a shame I don't have this kind of luck with lottery tickets. I'm > able to reproduce the hang still using both -current and the latest > amd64 snap. To reproduce, I just continuously scp a large file to > another machine while 'apmd -C'

Re: NAT, Firewall & pf

2009-02-25 Thread Jorge Enrique Valbuena Vargas
Hi, these simple rules works for me ! Remember how good is the learning process ! I hope this can help ! ext_if="vr0" dmz_if="sis1" int_if="sis0" ext_ip="123.45.67.89" #Don't Filter on the loopback interface set block-policy drop set skip on lo #NORMALIZACION DE PAQUETES scrub in all scrub

Re: NAT, Firewall & pf

2009-02-25 Thread Jason Dixon
On Thu, Feb 26, 2009 at 01:14:43PM +1100, Rod Whitworth wrote: > On Wed, 25 Feb 2009 17:39:31 -0800, patrick keshishian wrote: > > >The floating states based on line 10 would be for pre-NAT sources on > >$int_if and wouldn't match any inbound packets on $ext_if. Unless I'm > >misunderstanding how

Re: kernel freeze randomly

2009-02-25 Thread Dan Harnett
On Wed, Feb 25, 2009 at 09:07:52PM -0500, Ted Unangst wrote: > Ok, there are several code points here, and I'm having trouble keeping > track of them all and who's machine worked how when. > > First, there's A. This is the code that shipped in 4.4. > Then we have B. This was the code that went i

VLAN Priority/802.1p

2009-02-25 Thread Insan Praja SW
Hi Misc@, I understand that we can have vlan priority on vlan interfaces. My question is, can OpenBSD process these 802.1p tags for CoS/QoS purposes? In PF we can mark/tag/process traffic by its DSCP code. Can we do something like this with VLAN Priority? Thanks, Insan -- insandotpraja(at)

Re: NAT, Firewall & pf

2009-02-25 Thread Rod Whitworth
On Wed, 25 Feb 2009 21:27:24 -0500, Jason Dixon wrote: >On Thu, Feb 26, 2009 at 01:14:43PM +1100, Rod Whitworth wrote: >> On Wed, 25 Feb 2009 17:39:31 -0800, patrick keshishian wrote: >> >> >The floating states based on line 10 would be for pre-NAT sources on >> >$int_if and wouldn't match any in

Re: kernel freeze randomly

2009-02-25 Thread Marco Peereboom
I can comment from experience that the apmd changes only made it happen quicker; it happened nonetheless just less frequent. I haven't tried D yet on the laptop but I will do that right now. On Wed, Feb 25, 2009 at 09:48:34PM -0500, Dan Harnett wrote: > On Wed, Feb 25, 2009 at 09:07:52PM -0500, T

Re: kernel freeze randomly

2009-02-25 Thread Marco Peereboom
I have a binary MP kernel for amd64 that I am willing to share with people who want to test and make sure that we all test the same thing. Contact me off list. On Wed, Feb 25, 2009 at 10:10:34PM -0600, Marco Peereboom wrote: > I can comment from experience that the apmd changes only made it happe

Re: NAT, Firewall & pf

2009-02-25 Thread Jason Dixon
On Thu, Feb 26, 2009 at 03:05:07PM +1100, Rod Whitworth wrote: > On Wed, 25 Feb 2009 21:27:24 -0500, Jason Dixon wrote: > > >The 'block in' will block return traffic since no state is matching for > >outbound traffic (see prior emails about translation before filtering). > > > Oh dear! Then you me

Re: NAT, Firewall & pf

2009-02-25 Thread patrick keshishian
On Wed, Feb 25, 2009 at 8:05 PM, Rod Whitworth wrote: > Now there is a difference. In case you missed it - I used "pass out" > not "pass out on $ext_if" but that make no difference, in fact as I > pointed out earlier there is no "block out" for anything in the ruleset > so you can remove the "pass

Re: NAT, Firewall & pf

2009-02-25 Thread patrick keshishian
On Wed, Feb 25, 2009 at 8:45 PM, Jason Dixon wrote: > I'll agree with you here. B Patrick makes a good point in that > translation rules always apply before filter rules and that *should* > take effect here as well (nat outbound). B However, after thinking about > it a bit more, we usually apply t

Re: NAT, Firewall & pf

2009-02-25 Thread ropers
2009/2/26 patrick keshishian : > On Wed, Feb 25, 2009 at 8:05 PM, Rod Whitworth wrote: >> Now there is a difference. In case you missed it - I used "pass out" >> not "pass out on $ext_if" but that make no difference, in fact as I >> pointed out earlier there is no "block out" for anything in the r

Re: kernel freeze randomly

2009-02-25 Thread ropers
2009/2/26 Ted Unangst : > The looping sound is very common whenever a machine freezes. The > sound chip has a small buffer, and until told otherwise, will just > keep playing it. Yeah, for the record, this pretty much happens in all OSes, whenever something sound-related crashes badly. Happens in

Re: NAT, Firewall & pf

2009-02-25 Thread Jason Dixon
On Thu, Feb 26, 2009 at 06:47:23AM +0100, ropers wrote: > 2009/2/26 patrick keshishian : > > On Wed, Feb 25, 2009 at 8:05 PM, Rod Whitworth wrote: > >> Now there is a difference. In case you missed it - I used "pass out" > >> not "pass out on $ext_if" but that make no difference, in fact as I > >>

Re: TNC Packet Radio for OpenBSD

2009-02-25 Thread Marc Balmer
Am 26.02.2009 um 00:27 schrieb ropers: 2009/2/25 Joseph C. Bender : Marc Balmer wrote: I am using a TNC7multi. http://nt-g.de/de/tnc7multi/tnc7multi.php5 The venerable KPC-3 from Kantronics is always a good choice as well. http://www.kantronics.com/products/kpc3.html Apologies if this