Re: tutorial for securing wifi networks with ipsec and openbsd, somewhere?

2006-01-25 Thread Christian Weisgerber
Didier Wiroth <[EMAIL PROTECTED]> wrote: > I've read man ipsec and vpn. Unfortunately I'm totally new to ipsec and > have no ipsec experience. > > I'm looking for tutorials with samples, URLs or anything else, where I > can find additional info on how to secure wifi networks with openbsd's: > ips

Re: iwi broken in 3.8-current?

2006-01-26 Thread Christian Weisgerber
Edd Barrett <[EMAIL PROTECTED]> wrote: > Most odd. Im using iwi driver on my thinkpad r50e, and it works great but > you only get 1 chance to configure it. after you run dhclient, if it fails, > you have to reboot and try again. With the 2200BG in my Thinkpad X40 there is no problem starting iwi

Re: pf on loopback interfaces?

2006-01-28 Thread Christian Weisgerber
Prabhu Gurumurthy <[EMAIL PROTECTED]> wrote: > If I understand correctly, pf will see packets on all interfaces by > default unless you specify > > set skip on lo Maybe I should rephrase the question: In the setup I described, will any packet ever actually be passed in or out over lo1? -- Ch

Re: tutorial for securing wifi networks with ipsec and openbsd, somewhere?

2006-02-06 Thread Christian Weisgerber
Christian Weisgerber <[EMAIL PROTECTED]> wrote: > Okay, this is as good an opportunity as any to write down what I > did to my wireless a while ago: Meanwhile, ipsecctl has gained support for pre-shared key authentication. So in 3.9, things are simpler still: Configure dhcpd on

Re: mergemaster

2006-02-16 Thread Christian Weisgerber
Antoine Jacoutot <[EMAIL PROTECTED]> wrote: > Any news about the possible inclusion of mergemaster/mergeslave into the base > system ? I've shelved this for 3.9 since I haven't gotten around to evaluating mergeslave yet. -- Christian "naddy" Weisgerber [EMAIL PROTECTED]

Re: thttpd with php

2006-02-19 Thread Christian Weisgerber
Stuart Henderson <[EMAIL PROTECTED]> wrote: > CGI is possibly the easiest way, bearing in mind you won't handle a high > PHP load with thttpd anyway (it serializes PHP requests even with the > module version). Other options - [...] lighttpd with fastcgi php? -- Christian "naddy" Weisgerber

Re: T-shirt query.

2006-02-26 Thread Christian Weisgerber
Edd Barrett <[EMAIL PROTECTED]> wrote: > http://saad.docisland.org/pictures/fosdem2004/files/page11-1008-full.html > (far left. Dark with small blue puffy logo) > Where can you get this tee? It doesnt appear to be on the t-shirts page. But it is. That's the "Chix Dig OpenBSD" one. -- Christian

Re: Machine performance

2005-05-15 Thread Christian Weisgerber
Steve Shockley <[EMAIL PROTECTED]> wrote: > What's the biggest bottleneck when compiling the ports tree? CPU. Disk is not a big contributor, unless you are building on something really slow like a laptop disk. > Would compiling ports actually use four processors? Not by default, no. However, Ni

Re: OpenBSD Torrents available

2005-05-18 Thread Christian Weisgerber
andrew fresh <[EMAIL PROTECTED]> wrote: > We have set up an site from which you can get OpenBSD Torrents. > The site is http://openbsd.somedomain.net. Interesting project. Of course, unless several people are getting the same torrent at the same time, it degenerates into a simple download from t

Re: OpenBSD Torrents available

2005-05-18 Thread Christian Weisgerber
Rod Dorman <[EMAIL PROTECTED]> wrote: > > Of course, unless several people are getting the same torrent at > > the same time, it degenerates into a simple download from the seed > > machine and downloading from an FTP mirror would be faster. ... > > This is getting off topic but I thought that o

Re: Question regarding IPsec HMAC-SHA2 incompatibility after OpenBSD 4.6

2012-05-12 Thread Christian Weisgerber
Johan Ryberg wrote: > I found this information that seems very interesting: > http://www.openbsd.org/faq/upgrade47.html#hmac-sha2 > ike esp from 192.168.1.1 to 10.0.0.17 peer 192.168.10.1 psk mekmitasdigoat > > The man page of ipsec.conf says that hmac-sha1, aes, and modp1024 is > used as mode

Re: Error while copying data from another disk

2012-05-14 Thread Christian Weisgerber
Kevin Chadwick wrote: [SpinRite] > Takes for ever though but is easy to use and may recover partial > sectors automatically too ;-) I really wonder how it's going to do that. > mhdd comes with sysresccd and can make a drive ignore bad sectors > independent from the filesystem. Be careful to ge

Re: Error while copying data from another disk

2012-05-14 Thread Christian Weisgerber
Chris Zakelj: > > [SpinRite] > > > Takes for ever though but is easy to use and may recover partial > > > sectors automatically too ;-) > > > > I really wonder how it's going to do that. > > It reads the questionable sector(s) a couple hundred times with the drive's > ECC logic turned off, Inter

Re: release failing to build. hardware related?

2012-05-15 Thread Christian Weisgerber
Marc Peters wrote: > i am trying to built a 5.1 release which fails at > disklabel: unknown disk type: floppy576 There's something wrong with your /etc/disktab. Maybe you didn't update your /etc files with sysmerge after running an upgrade from the install media. -- Christian "naddy" Weisger

Re: release failing to build. hardware related?

2012-05-16 Thread Christian Weisgerber
In article <4fb37187.4010...@sanity.de>, Marc Peters wrote: > > You have the disktab file from the i386 arch installed on a amd64 > > system. > > i reinstalled the box as i upgraded it and went to amd64 (mid April). > this was sucked in by my etc-backup. Didn't know, that it would cause > proble

Re: adjfreq() question

2012-05-21 Thread Christian Weisgerber
Alan Corey wrote: > Can adjfreq() adjust the frequency of the real time clock that runs when > the computer is turned off or is it just the clock within the operating > system? The latter. > I just ported chu by William Rossi and I'm wondering if adjfreq might be a > workaround for not havin

Re: German Government claims to be able to break PGP and SSH

2012-05-24 Thread Christian Weisgerber
Stefan Wollny wrote: > that the German government claims to be able to break PGP and SSH. I think you have to be cluelessly paranoid to read such a claim into a meaningless statement. > Question: > "3. Is the technique used also able to at least in part decode and/or > analyze encrypted communi

Re: Documentation for Apache-SSL key creation

2012-05-25 Thread Christian Weisgerber
Jason McIntyre wrote: > > While making a self-signed key for use with Apache I noticed that the > > FAQ recommends deprecated crypto (RSA-1024 and SHA1). I chose instead > > RSA-4096 and sha256. A couple patches for the website and manual page > > are below. > > changes committed, thanks. RSA

Re: German Government claims to be able to break PGP and SSH

2012-05-25 Thread Christian Weisgerber
Peter Laufenberg wrote: > My German's rusty but the follow-up article quoting Symantec mentions > spyware/keylogging, which has been the traditional "technique" used in > in the past. But that's for targeted surveillance. The original article refers to a bulk grep of 16,400 search terms over 37

Re: ntpd not adjusting system clock

2012-05-28 Thread Christian Weisgerber
Zi Loff wrote: > Is the clock drift just to large for ntpd/adjtime/adjfreq to handle > properly? I forgot what the maximum is that ntpd can handle, but yes, it looks like the drift is just too large. > If so, is there any 'cure' on the software side? You could try a different kern.timecounter.

Re: ntpd not adjusting system clock

2012-05-29 Thread Christian Weisgerber
Zi Loff wrote: > I'm running rdate every minute via cron as a temporary fix, until the > new HP N40L I got for under 200 euros (no HD nor DVD) arrives. :) So you jump the clock every minute? For the archives: That's about the worst possible thing to do. -- Christian "naddy" Weisgerber

Re: Large (3TB) HDD support

2012-06-01 Thread Christian Weisgerber
Scott McEachern wrote: > I'm trying to add a pair of 3TB drives to my workstation, which I plan > on turning into a ~3TB RAID 1 array, and seem to be having difficulty > realizing the full size of the drives. The partition table in the MBR is limited to 32-bit numbers. 512 bytes/sector * 2^32

Re: Large (3TB) HDD support

2012-06-01 Thread Christian Weisgerber
David Diggles wrote: > I fsck'd two 3TB filesystems yesterday with 512MB ram, on 5.1... > it took a while, but worked. I just fsck'ed a 2.7TB filesystem in 1 minute, 43 seconds. 61% full, 447166 files. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Large (3TB) HDD support

2012-06-02 Thread Christian Weisgerber
Otto Moerbeek wrote: > > >I just fsck'ed a 2.7TB filesystem in 1 minute, 43 seconds. > > >61% full, 447166 files. > > > > What CPU and how much RAM? SATA2 or 3? > > Even more important: block size, fragment size, # of inodes? Default values all the way. 64k/8k. Filesystem SizeUsed

Re: Large (3TB) HDD support

2012-06-04 Thread Christian Weisgerber
Peter Kay wrote: > GPT is a foregone conclusion unless you are blind to the future. The only > alternative is OS specific disk hackery, and that does no-one any favours. Well, OpenBSD/i386 (and now /amd64) has used such hackery since the very beginning and doesn't fare too badly with it. Back i

Re: "Seagate Expansion" 3T disk works via USB but not via SATA

2012-06-22 Thread Christian Weisgerber
Nick Holland wrote: > > Dammit. The plan was for wd(4) to die before disks got that big. Sigh. > > ok, let's see if I got this right... > that's not a >2TB disk issue, that's a 4k issue, Right. > so this could potentially bite people with smaller disks that > were also 4k sectored? Yes, but I

Re: Hardware/System Question

2012-06-22 Thread Christian Weisgerber
Opie wrote: >   I'm looking for a small system that I can run ftp, web, personal mail and > maybe a build enviroment.  I say small system only due to space requirements.  > A normal desktop computer or small would work well.  This is one that I was > looking at but not sure if it would be i386 si

Re: ipsec tunnel speeds

2012-06-22 Thread Christian Weisgerber
Ted Unangst wrote: > > 550Mb/s with aes-128-gcm (requires AES-NI and amd64) on > > hw.model=Intel(R) Xeon(R) CPU E5649 @ 2.53GHz > > hw.vendor=HP > > hw.product=ProLiant DL360 G7 > > what's the reason aes-128-gcm requires amd64? we can't add that code > to i386? No technical reason, but all th

Re: Romanian layout in OpenBSD

2012-07-05 Thread Christian Weisgerber
Miod Vallat wrote: > > Now, the last two characters (0x0219 and 0x021A) are tricky, they > > should be s-comma and t-comma, not to be mistaken with s-cedilla and > > t-cedilla. > > Err, aren't your commas ogoneks, by chance? No, ogonek it the little right-curling tail added to some vowel letter

Re: Doubt with IPSEC

2012-07-12 Thread Christian Weisgerber
Rodrigo Mosconi wrote: > ike esp transport from hubble to spitzer \ > main \ > auth hmac-sha2-512 \ > enc aes-256 \ > group modp4096 \ > srcid hubble.domain \ > dstid spitzer.domain \ > psk '/+V1gt9G6FTQ"_}/Rn#nny!ZCgmd5+jIe^dKXf+)40R6%ZS(zD

Re: IPv6, OpenBSD and .. Mac OS X Lion

2012-07-12 Thread Christian Weisgerber
Tor Houghton wrote: > I'm successfully dishing out IPv6 connectivity to iPads and Androids, > but the Macs on the network refuse to acknowledge that the OpenBSD 5.1 > system can provide IPv6 routing for it. That can't be. This has worked for years, and without any configuration on the Mac side.

Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Christian Weisgerber
David Diggles wrote: > I am looking for ways to speed up scp over 10GigE. > With parallel transfer of 4x 8GB files, I get > the following test results with various ciphers. > > These tests maxed out 4 cores with encryption overhead. Assuming that crypto actually is your bottleneck, here are a f

Re: minimal radio streamer on Alix LX800 gateway?

2012-07-23 Thread Christian Weisgerber
Peter Laufenberg wrote: > I want to set up a minimal mp3 Internet radio streamer directly on my > PPPoE ADSL modem so it doesn't travel through the rest of the LAN and > pollute logs, I don't understand that rationale. > This Alix has no on-board audio but I have unused external audio > interfa

Re: minimal radio streamer on Alix LX800 gateway?

2012-07-23 Thread Christian Weisgerber
Peter Laufenberg wrote: > Ok I'm looking at madplay since most other players seem to depend on > madlib anyway. madplay doesn't support streaming or interactive controls. The madlib-based mpg321 does, and eats about twice as much CPU as mpg123 on the Geode LX800. -- Christian "naddy" Weisgerb

Re: minimal radio streamer on Alix LX800 gateway?

2012-07-23 Thread Christian Weisgerber
Peter Laufenberg wrote: > >That looks like the most difficult part, because offhand I have no > >idea how to interface those input devices with a tty. > > The point is not to need tty or network client/server messaging. I query > a USB device directly, never leaves the Geode. Well, on the box y

Re: Calomel.org

2012-07-26 Thread Christian Weisgerber
Peter Laufenberg wrote: > Here's a better idea I'm putting out there to see how fast it gets shot > down: openbsd-wiki.org, with a rule that whoever gets a question > answered on misc has to add an entry with the cleaned reply. Go ahead, make it so. I'm not being sarcastic. Well, only a little.

Re: Clues as to how to record audio

2012-07-27 Thread Christian Weisgerber
Jan Stary wrote: > If you want to record an intenet-streaming radio, > just ftp(1) the htttp://radio.org:1234/stream.mp3 > - I have written me a simple shell wrapper to do that: Personally, I've found curl(1) (ports/net/curl) with its --max-time option handy for that. -- Christian "naddy" Weis

Re: Kernel Level Audio Next Generation

2012-08-02 Thread Christian Weisgerber
Alexey Suslikov wrote: > http://klang.eudyptula.org/ Well, if nothing else the project has a clever name--if you know German. > Just curious, why they didn't even try to evaluate OpenBSD sndio. You should ask the author, not us. Also, that text doesn't definitely say that he didn't look at sn

Re: getty

2012-08-07 Thread Christian Weisgerber
Miod Vallat wrote: > > ttyC3 "/usr/libexec/getty std.192600" vt220 on secure > > As long as you are using a baud rate recognized by getty, things will > still work and you won't notice a change, because wsdisplay(4) ttys > ignore the terminal speed you try to configure them at. It's true

Re: azalia audio: Sound distorted

2012-08-10 Thread Christian Weisgerber
Jan Stary wrote: > > I am currently running a snapshot of OpenBSD-current (amd64) as of > > 31st July, 2012. I am having audio problems, i.e. the sound is distorted > > when playing an mp3 or ogg-file. > > How exactly do you play it? > Do you run sndiod? How exactly? I got a new Ivy Bridge lap

Re: azalia audio: Sound distorted

2012-08-10 Thread Christian Weisgerber
Mark Kettenis: > Does the diff below fix the problem? Yes, it does. > --- azalia.c 10 May 2012 22:46:48 - 1.200 > +++ azalia.c 10 Aug 2012 16:22:12 - > @@ -461,6 +461,7 @@ azalia_configure_pci(azalia_t *az) > case PCI_PRODUCT_INTEL_3400_HDA: > case PCI_PRODUCT_INTEL_QS

Re: Any T410/T420 with suspend/resume fully working in 5.1 or current?

2012-08-11 Thread Christian Weisgerber
Ted Unangst wrote: > While we're on the subject, the T430 and T430s (ivy bridge update) do > not work at present, or at least my T430s didn't. ahci times out > initializing, so there's no hard drive. The wireless didn't seem to be > detected either, and of course the usb3 ports don't work, only t

Re: Any T410/T420 with suspend/resume fully working in 5.1 or current?

2012-08-11 Thread Christian Weisgerber
Christiano F. Haesbaert: > > On the other hand, the Ivy-Bridge-based X230 works reasonably well: > > > > * No accelerated X11, only VESA driver. You can't switch to a text > > console or watch HD videos. > > Do you get the correct resolution at least ? Yes. With no xorg.conf, I get a 1368x76

Re: Building i386 -cureent Userland failed

2012-08-23 Thread Christian Weisgerber
Insan Praja SW wrote: > /usr/src/kerberosV/usr.bin/klist/../../src/kuser/klist.c:496: error: > 'VIOCGETTOK' undeclared (first use in this function) > Any hints how to fix this? This might be enough. My build is still running... Index: kerberosV/src/lib/kafs/kafs.h ==

smtpd queue encryotion (was: Re: CVS: cvs.openbsd.org: src)

2012-08-29 Thread Christian Weisgerber
Over on source-changes, Kevin Chadwick wrote: > I don't disagree with using AES-128 as default on a possibly busy mail > server. I was just wondering why the word obsolete was used and if it > was simply because twofish and AES are faster. Blowfish is older, not standardized, and hasn't received

Cost of malloc options

2012-08-31 Thread Christian Weisgerber
A couple of weeks ago, I ran a bunch of make builds (ncpu=4 amd64) with different malloc() options enabled. I don't want to spawn a discussion, but for anybody who's curious, and for the archives, here are the results: 36m17.68s real47m33.50s user26m49.97s system F 39m34.31s

Re: smtpd queue encryotion

2012-08-31 Thread Christian Weisgerber
Kurt Mosiejczuk wrote: > > Blowfish is older, not standardized, and hasn't received the attention > > from the cryptographic community that AES has. > > Blowfish isn't standardized? Not being chosen as a standard doesn't > mean that everyone is using an incompatible version of something. And

Re: Cost of malloc options

2012-08-31 Thread Christian Weisgerber
Marc Espie: > > 36m17.68s real > > S 55m14.16s real > > I kind of wonder about similar data for full bulk builds. That was my starting point, actually. I did a full bulk build with S and was startled by the slowdown. I forgot the exact numbers, but the relative difference was in the vici

Re: Any T410/T420 with suspend/resume fully working in 5.1 or current?

2012-09-07 Thread Christian Weisgerber
> On Sat, Aug 11, 2012 at 17:25, Christian Weisgerber wrote: > > > On the other hand, the Ivy-Bridge-based X230 works reasonably well: > > > > * No USB3 support obviously. The blue ports work fine for USB1/2, > > though. Let me modify that. Some USB devices are

Re: pxeboot, machine dependent kernel

2012-09-08 Thread Christian Weisgerber
Ted Unangst wrote: > You can also run two tftp servers on two different IPs. The new tftpd also has this: -r socket Issue filename rewrite requests to the specified UNIX domain socket. tftpd will write lines in the format "IP OP filename", terminated by a newline, where

Re: IPSEC VPN performance

2012-09-28 Thread Christian Weisgerber
Jim Miller wrote: > The test I'm using is this > Host A: > # nc -v -l 12345 | /dev/null > > Host B: > # dd if=/dev/zero bs=1000 count=1 | nc -v 12345 I increased the count a bit: 10 bytes transferred in 53.265 secs (18773882 bytes/sec) That's with AES-256-GCM between two Sandy Bri

Re: Incorrect NAT translation for sip traffic ?

2011-07-29 Thread Christian Weisgerber
Stuart Henderson wrote: > Whatever this is (and I don't have the slightest clue what that > might be), I noticed it on a 4.9 box the other day, upgraded to > -current, still see it there. > Jul 28 19:46:36 bath-gw /bsd: pf: state key linking mismatch! dir=OUT, > if=em3, stored af=2, a0: 85.158.4

Re: terminal descriptions for AMD/Intel consoles

2011-09-01 Thread Christian Weisgerber
Alexei Malinin wrote: > I often worked on OpenBSD AMD/Intel PC consoles and really did not have > good support of navigation and function keys of a typical PC keyboard. Part of the problem is that wscons(4) and xterm(1) strive to emulate a DEC VT220 terminal whose LK201 keyboard is quite differe

Re: Security over wireless.

2011-09-09 Thread Christian Weisgerber
Stuart Henderson wrote: > laptop: > ike dynamic esp from egress to 0.0.0.0/0 peer 11.22.33.44 > > router: > ike passive esp from any to any > > possible complications:- > > - if you will be communicating with other machines in the same subnet, > they will send return traffic directly rather th

Re: acceleration for softraid crypto

2011-09-10 Thread Christian Weisgerber
Remi Locherer wrote: > To speed up the encryption I'm looking at the vpn1411 card from soekris. > The hifn(4) man page tells me that this card is supported and the chip > (hifn 7955) accelerates AES-CBC. Correct. > Will this card help making softraid crypto faster on that system? No. soft

Re: tar -J for xz

2011-10-08 Thread Christian Weisgerber
Dmitrij D. Czarkoff wrote: > Why not include xz-utils and bzip2 in base? Both are well esteblished and at > least bzip2 is anyway installed on nearly every desktop. The funny thing is, we already have a bzip2 (de)compressor in base. IO::Compress::Bzip2(3p) -- Christian "naddy" Weisgerber

Re: man page sources?

2011-10-23 Thread Christian Weisgerber
Douglas Ray wrote: > If I get anywhere useful, might there be any interest in > posting a "manman49.tgz" on ftp.openbsd.org? ... a small > addendum, for those of us bitten by OpenBSD 4.9's little > excursion from BSD habit? OpenBSD has only ever installed the cat pages. That "little excursion"

Re: comp.unix.bsd.openbsd.announce

2011-11-23 Thread Christian Weisgerber
wrote: > I cannot see any reason not to forward OpenBSD anouncements to > comp.unix.bsd.openbsd.announce. And yet it appears you have not done so. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: comp.unix.bsd.openbsd.announce

2011-11-23 Thread Christian Weisgerber
wrote: > This is a formal Request for Discussion (RFD) to remove moderated > newsgroup comp.unix.bsd.openbsd.announce." > > --- > > Is really no one interessted on the group? Apparently not. I was quite surprised when two years ago one Florian Rehnisch, who I had never heard o

Re: customize CFLAG with /etc/mk.conf

2010-03-27 Thread Christian Weisgerber
Aaron Lewis wrote: > I read `man mk.conf' found there's no CFLAGS or CXXFLAG entries , > even though i tried to > put `CFLAG += -O3 -march=i686' into that file , but ports doesn't > recognize it. No such variable is used by the ports infrastructure. Note the name, CFLAG is not the sam

Re: -current amd64 (#178): "NO PROPOSAL CHOSEN"

2010-04-09 Thread Christian Weisgerber
Toni Mueller wrote: > while playing around with the latest code as of today, off of CVS's > HEAD, I find that it sometimes takes considerable time to establish a > connection to a static peer, and while negotiating, the two isakmpds > sometimes send "NO_PROPOSAL_CHOSEN" to each other. After a whi

Re: Execute startup script as

2010-04-10 Thread Christian Weisgerber
Mats-Gxran Karlsen wrote: > I'm trying to create a startup script that executes the transmission-daemon as > a regular user. > /usr/bin/sudo -u $USERNAME -p $PASSWD $DAEMON -g $CONFIGDIR You are going about this the wrong way. sudo(8) is primarily designed to give additional priviledges to an

Re: compile in 32 bit in alpha

2010-04-11 Thread Christian Weisgerber
Kapetanakis Giannis wrote: > Is there a way I would compile in 32 bit compatibility mode > in alpha arch? No. Since the alpha architecture has been 64-bit from its very inception, your question doesn't make any sense. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: OpenBSD 4.6 + HD Audio

2010-04-30 Thread Christian Weisgerber
Mateusz Gierblinski wrote: > I have recently installed OpenBSD 4.6 on my desktop computer. Everything > works fine expect for audio. I would like to use xmms or audacious to let > some notes get out of my boxes, but the problem is they seem not to work. > The only thing thats works is mplayer. I

Re: nested vlans: safe to use?

2010-05-12 Thread Christian Weisgerber
Stuart Henderson wrote: > In-tree, there is the option of 'ifconfig vlanXXX vlandev vlanYYY" which > might get you somewhere. If I remember correctly, at the time I added support for hardware vlan tagging, this kind of stacking did not work--and I don't think this has changed. -- Christian "na

Re: nested vlans: safe to use?

2010-05-13 Thread Christian Weisgerber
Stuart Henderson wrote: > There's also a diff at > http://www.mail-archive.com/misc@openbsd.org/msg65694.html > that switches ethertype so you can interoperate with other vendors QinQ (it > will need updating for -current). I think I'll pick that one up and see about getting it into the tree. -

Re: userland access to cryptodev in -current

2011-02-14 Thread Christian Weisgerber
OpenBSD wrote: > From what I know, you need > userland access to cryptodev to use hardware accelerated IPSEC VPN, openssl, > openssh. You are mistaken about IPsec. > Which services can still use hardware acceleration? IPsec. -- Christian "naddy" Weisgerber na...@mips

cmpci(4) and S/PDIF?

2011-05-04 Thread Christian Weisgerber
Has anybody had success using the S/PDIF output of a cmpci(4) sound card? -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: uaudio

2011-05-08 Thread Christian Weisgerber
Jan Stary wrote: > > you have to recompile aucat in 24-bit mode. > > > > make COPTS=-DADATA_BITS=24 > > Thank you. Is this documented somewhere? No. > Is the 24bit functionality still considered experimental? It requires significantly more CPU than 16-bit processing and few people need i

Re: cmpci(4) and S/PDIF?

2011-05-11 Thread Christian Weisgerber
David Steiner wrote: > yes! my soundcard just arrived, which i bought for SPDIF playback with the > C-Media chipset. sofar it works like a charm. here's how i got it > working: > > aucat -r 44100 -b 8192 -l > mixerctl -t playback.mode # this puts it in SPDIF playback mode > > dmesg specs: >

Re: uaudio

2011-05-13 Thread Christian Weisgerber
wrote: > > I just bought me the "new" M-Audio USB MobilePre (MK-II): > > Does it support 44.1kHz as well, or is it 48kHz only? > I could not find this information of the M-Audio site. The manual that you can download at the M-Audio site says: MobilePre can operate at two sample rates (44.1 k

Re: ifconfig iwi0 scan -> iwi0: fatal firmware error

2011-05-29 Thread Christian Weisgerber
wrote: > Obviously easy enough to work around, but ... why? Just a firmware bug & end > of > story? Any better solution or something I'm doing wrong / missing? iwi(4) is just unreliable. It also dies quite frequently with a firmware error during normal operation. -- Christian "naddy" Weisg

Re: How do I exclude a directory using tar in OpenBSD?

2011-05-31 Thread Christian Weisgerber
Marian Hettwer wrote: > bsdtar from the FreeBSD project supports --exclude too. > The OP could as well install gnu tar from packages. bsdtar doens't seem > to exist... bsdtar is available as part of the archivers/libarchive port. -- Christian "naddy" Weisgerber na...@m

Re: How do I exclude a directory using tar in OpenBSD?

2011-05-31 Thread Christian Weisgerber
Marian Hettwer wrote: > You are right. One should rely on posix standards. Well, the POSIX archiver utility is pax(1). The combination of find(1) and pax(1) also lends itself to excluding directories. > Talking about BSD specifics. I really like the possibility on my > FreeBSD box with bsdtar

Re: vmmap: bad software everywhere

2011-05-31 Thread Christian Weisgerber
Marc Espie wrote: > Not surprisingly, a lot of software that claims to be 64 bits-ready isn't. > This touches all web navigators, most jit engines, and probably lots more > of software (our ports tree version of gnu-grep, for instance). I don't think a lot suffers from it, but some prominent cas

duid

2011-06-04 Thread Christian Weisgerber
The convenient thing about mounting your filesystems by DUID in fstab(5) is that you can just add drives without having to worry about, say, wd0 becoming wd1 and you having to edit /etc/fstab correspondingly. That said, it isn't entirely transparent. If wd0 suddenly does turn into wd1 and you are

The power button

2011-06-05 Thread Christian Weisgerber
When I press the power button on an x86 PC, acpibtn(4) receives the event and shuts down the machine. When I press the power button on my Blade 100 (sparc64), power(4) receives the event and by default ignores it. Only if the machdep.kbdreset sysctl is set to 1 will power(4) proceed to shut down

Re: cmpci(4) and S/PDIF?

2011-06-09 Thread Christian Weisgerber
Eventually I also picked up a Sweex SC015 card. (These are readily available in Europe at the time of writing.) cmpci0 at pci1 dev 2 function 0 "C-Media Electronics CMI8738/C3DX Audio" rev 0x10: ivec 0x7d5 audio1 at cmpci0 opl at cmpci0 not configured mpu at cmpci0 not configured Playing stereo

Re: cmpci(4) and S/PDIF?

2011-06-10 Thread Christian Weisgerber
Jacob Meuser wrote: > > Strangely, AC3/DTS pass-through does *not* work. > > there's this comment in cmpci.c: > > /* disable ac3 and 24 and 32 bit s/pdif modes */ > > and then the relevant register bits are cleared. feel free to play > with making it work ;) I would, but there shouldn't

Re: cmpci(4) and S/PDIF?

2011-06-15 Thread Christian Weisgerber
Alexandre Ratchov: > > I would, but there shouldn't be anything required to make it work. > > The point of AC3/DTS pass-through mode is that it sends what looks > > like 16-bit stereo audio at the S/PDIF level. It's only the receiver > > that, on seeing a signature bit pattern, re-interprets the

Re: RAID options for OpenBSD

2011-06-17 Thread Christian Weisgerber
Tomas Bodzar wrote: > You will not be happy with reliability of SSD > http://www.codinghorror.com/blog/2011/05/the-hot-crazy-solid-state-drive-scal > e.html After lots and lots of useless blather, the first interesting tidbit shows up in a comment more than halfway down the page: | Over at blek

Re: Secret key in the packet filter.

2010-07-13 Thread Christian Weisgerber
Bryan wrote: > really? the devs have a "backdoor" in PF? you're an idiot... Of course we do. Don't try to find it. We have implemented a Langford hack. If you read the source, the backdoor will jump over and inscribe itself directly into your brain, and people will be able to take over your

Re: Hardware Spec Search Engine?

2010-07-17 Thread Christian Weisgerber
Arnaud Bergeron wrote: > > -08:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168B > PCI Express Gigabit Ethernet controller (rev 03) > > For the wired network card, check the rl(4) and/or re(4) > man page for it. It's a re(4). > As for Firewire, it was supported at one poi

Re: Hardware Spec Search Engine?

2010-07-17 Thread Christian Weisgerber
Tony Abernethy wrote: > > Somewhat embarrassingly, OpenBSD has never had a working Firewire > > implementation. > > As I understand it, only the malware writers are embarrassed. The fanboys here need to understand that OpenBSD does have actual deficiencies, and trying to rationalize them away a

Re: OpenBSD mascotte

2010-07-25 Thread Christian Weisgerber
raven wrote: > i'm lookin around to get an OpenBSD Mascotte puppet (i dont know if it's > the right word) in Europe, some time ago i see it on OpenBSD website. https://https.openbsd.org/images/pluffy.jpg There was a small production run of these Puffy plushies manufactured by Steiner Pluescht

Re: X default screen resolution on sparc64

2010-07-28 Thread Christian Weisgerber
Pete Vickers wrote: > From dmesg, the graphics card in my Sun blade100 is: > > machfb0 at pci0 dev 19 function 0 "ATI Rage XL" rev 0x27 > machfb0: ATY,RageXL, 1280x1024 > > which is connected via DVI cable to a Sun monitor #365-1429. DVI? On a Blade 100? > I thought that one of the big advan

UTF-8 (was: Re: CVS: cvs.openbsd.org: src)

2010-07-28 Thread Christian Weisgerber
Stefan Sperling wrote: > Log message: > Install the en_US.UTF-8 ctype locale support file, and allow the UTF-8 > ctype locale to be enabled via setlocale(3) (export LC_CTYPE='en_US.UTF-8'). > > A lot of programs, especially from ports, will now start using UTF-8 if the > UTF-8 locale is enabled

Re: UTF-8 (was: Re: CVS: cvs.openbsd.org: src)

2010-07-28 Thread Christian Weisgerber
Christian Weisgerber wrote: > == xterm == What doesn't work: UTF-8 mode is incompatible with 8-bit control sequences. If that doesn't ring a bell for you, then you don't need to worry about it. ;-) I only noticed because the RMC on my AlphaServer 800 inserts 8-bit contro

Re: undeadly article

2010-08-18 Thread Christian Weisgerber
Mihai Popescu B.S. wrote: > I target airport behaviour with my comment. I use the airport for 6 > flight until now, no problem at all with security teams. I was quick > and polite in answers and the time with them was short. Most of them > have the "nose" to see what they are dealing with. The o

Re: Security via the NSA?

2009-11-23 Thread Christian Weisgerber
Nick Guenther wrote: > Like, obviously the NSA's mandate is spying Actually, that's only half the NSA's mandate. The other half is protecting the US government from spying. -- Christian "naddy" Weisgerber na...@mips.inka.de

Re: Security via the NSA?

2009-11-26 Thread Christian Weisgerber
Marco Peereboom wrote: > Never mind no one verifying any of the keys or anything else that SSL > spits out. I am talking to you firefox! That's pretty strange coming from the guy who complained the loudest about recent Firefox releases that actually try to enforce the chain of trust for certifi

uthum1

2009-12-04 Thread Christian Weisgerber
Why does a uthum(4) unit show up as two devices? The sensors are only attached to the second one. uhidev2 at uhub2 port 2 configuration 1 interface 0 "Ten X Technology, Inc. TEMPer sensor" rev 1.10/1.50 addr 4 uhidev2: iclass 3/1 uthum0 at uhidev2 uhidev3 at uhub2 port 2 configuration 1 interfac

Re: building sbin/route on -current?

2009-12-07 Thread Christian Weisgerber
James Hartley wrote: > I updated my local source tree Tuesday. Rebuilding the kernel went fine, > but building userland failed at sbin/route with the following messages: > > ===> sbin/route > cc -02 -pipe -nostdinc -idirafter /usr/dest/usr/include -c > /usr/src/sbin/route/route.c > cc -02 -pipe

Re: A question about puting OpenBSD on a Soekris

2009-12-15 Thread Christian Weisgerber
Jonathan Thornburg wrote: > For example, 2 years ago I set up a home firewall using a 1GB > Kingston CF card. For precisely the reasons Nick Holland outlined, > I used a standard OpenBSD install (done by plugging the CF card into > a USB-to-CF adaptor and then connecting the USB to my laptop).

Re: A question about puting OpenBSD on a Soekris

2009-12-15 Thread Christian Weisgerber
stan wrote: > OK with one resevation you have convinced me. Let's eliminate teh > reservation. One of the features of the system I chose was that it mounts > the flas RO, and uses memory filesystems for volatile stuff. Is this no > longer important? The only point of mounting filesystems read-on

Re: New Western Digital disks will have 4KB block size - issue?

2009-12-17 Thread Christian Weisgerber
Kenneth Westerback wrote: > 4K sectors themselves should work ok as we already do that for ffs on > CD media. Which works the last I checked. ... and is irrelevant. The drives under discussion use 4 kB sectors internally but present the usual 512-byte blocks to the outside. -- Christian "nadd

Re: Azalia and ac3

2009-12-20 Thread Christian Weisgerber
Chris Bennett wrote: > I've just gotten a new setup with azalia > > Can I output ac3 with something like mplayer to spdif and then decode it > externally? In principle, yes. In practice our mplayer port lacks a small patch to make this possible. > Or even better, decode it internally and out

Re: Has anyone a dual head monitor Matrox G450 G550 or G650 graphics card working with OpenBSD 4.6?

2009-12-23 Thread Christian Weisgerber
chefren wrote: > Has anyone a dual head monitor Matrox G450 G550 or G650 graphics card > working with OpenBSD 4.6? Probably not. From mga(4): Support for the second head on G400 cards requires a binary-only "mga_hal" module [...] That module also provides various other enhancements,

Re: ldconfig: default path?

2009-12-30 Thread Christian Weisgerber
Toni Mueller wrote: > I have now discovered that I overlooked the setting of /usr/local/lib > in /etc/rc. But it seems to mean that I have to re-run ldconfig > every time I install a new shared library, or programs depending on it > won't find it. Yes. Note that if you install a port/package, th

Re: ldconfig: default path?

2009-12-30 Thread Christian Weisgerber
Marc Espie wrote: > > > I also don't see how these directories got in the search path in > > > the first place. > > > > Something has called "ldconfig -m" during the build. > And you can use ldconfig -U to remove them. > > I don't know about a "long list of directories". These days, there are a

<    3   4   5   6   7   8   9   >