openbsd-misc mailing list

FromSubjectsort iconDate
Predrag Punosevac Jun 11, 3:52 pm 2008
Martin Toft Jun 11, 2:25 pm 2008
Don Hiatt
Kernel developers guide/tutorial
[ Pardon if this email was repeated. Sadly, I'm using Outlook and you know the rest :-) ] Can anyone point me to a kernel developers guide or tutorial? Something that explains how to write a "hello world" type device driver and such. Anything to bootstrap me a bit. ;-) Cheers! don
Jun 11, 2:09 pm 2008
Gallon Sylvestre
Re: Kernel developers guide/tutorial
On Wed, Jun 11, 2008 at 11:09 PM, Don Hiatt <DHiatt@zeugmasystems.com> http://marc.info/?l=openbsd-misc&m=120966236207298&w=2 You can also watch : man (4) lkm HTH, -- Gallon sylvestre OpenBSD fan | Rathaxes Core Developper LSE researcher | kernel developer for adeneo http://devsyl.blogspot.com/ | www.rathaxes.org
Jun 11, 2:30 pm 2008
carlopmart
Enabling ipv6 in only one interface
Hi all, Somebody knows how can I enable ipv6 in only one interface?? How can I do?? I have an openbsd 4.3 server with 6 interfaces and I need to setup ipv6 only in one interface to test some services. Many thanks. -- CL Martinez carlopmart {at} gmail {d0t} com
Jun 11, 8:44 am 2008
jmc
Re: Enabling ipv6 in only one interface
have you taken a look at /etc/netstart ?
Jun 11, 9:33 am 2008
Paul de Weerd
Re: Enabling ipv6 in only one interface
Not sure what you're asking here. If you're running GENERIC, your kernel is IPv6 enabled. This does not give you IPv6 connectivity per se (except for link local). Configure an address on the one interface you want to test your services on and test your services. If you want / must, you can configure pf to filter all other IPv6 traffic. Cheers, Paul 'WEiRD' de Weerd +++++++++++>-]<.>++[<------------>-]<+.--------------.[-] http://www.weirdnet.nl/
Jun 11, 11:33 am 2008
Marc Espie
Re: pkg_add errors
Looks like you have some proxying mechanism which fucks up. It definitely appears that your ftp client is not terminating client properly, something eats the connection termination. As said, if you are behind a nat, you should definitely make sure you have ftp proxying running, so that the connections are tracked correctly. Otherwise, use an http mirror, it doesn't have this shortcoming.
Jun 11, 4:00 pm 2008
Lars Noodén
Re: pkg_add errors
How about using an ftp proxy/cache behind your cisco pix? It should speed things up, too. Regards, -Lars
Jun 11, 8:30 am 2008
c l
pkg_add errors
Anyone else get this message when doing pkg_add's from ftp sites? 421 There are too many connections from your internet address I get this on all my openbsd boxes, 4.3 and -current from June 10, 2008. All of them are behind either a cisco pix or 4.3 -release firewall. It seems to happen with just about any package that has a few dependencies. _________________________________________________________________ Search that pays you back! Introducing Live Search ...
Jun 11, 8:22 am 2008
Tomas Bodzar
command history in ksh missed when I set $EDITOR
Hi all, When I set this in my .profile # Editor EDITOR=/usr/bin/vi export EDITOR then I don't have command history,I can't use arrow keys for going to previous command, CTRL+R is not running too. What's wrong with this setting?I'm using ksh Thx
Jun 11, 12:57 am 2008
Paul de Weerd
Re: command history in ksh missed when I set $EDITOR
On Wed, Jun 11, 2008 at 08:57:22AM +0100, Tomas Bodzar wrote: | Hi all, | | When I set this in my .profile | | # Editor | EDITOR=/usr/bin/vi | export EDITOR | | then I don't have command history,I can't use arrow keys for going to previous | command, | CTRL+R is not running too. | | What's wrong with this setting?I'm using ksh You'll have to `export VISUAL=emacs` or `set -o emacs` to use arrow keys for command history. Alternatively, you can do what you've configured your system to ...
Jun 11, 1:23 am 2008
Paul de Weerd
Re: command history in ksh missed when I set $EDITOR
Hi Tomas, On Wed, Jun 11, 2008 at 09:39:09AM +0100, Tomas Bodzar wrote: | As I read deeper now I found this : | | Note: traditionally, EDITOR was used to specify the name of an | (old-style) line editor, such as ed(1), and VISUAL was used | to | specify a (new-style) screen editor, such as vi(1). Hence if | VISUAL is set, it overrides EDITOR. | | I don't have VISUAL set and EDITOR was used for line editor.Maybe this? | Screen editor set ...
Jun 11, 2:03 am 2008
Tomas Bodzar
Re: command history in ksh missed when I set $EDITOR
As I read deeper now I found this : Note: traditionally, EDITOR was used to specify the name of an (old-style) line editor, such as ed(1), and VISUAL was used to specify a (new-style) screen editor, such as vi(1). Hence if VISUAL is set, it overrides EDITOR. I don't have VISUAL set and EDITOR was used for line editor.Maybe this? Screen editor set in variable for line editor? - don't know how it's set internal. -----Original ...
Jun 11, 1:39 am 2008
Tomas Bodzar
Re: command history in ksh missed when I set $EDITOR
Hi Max, My english is sometimes not so clear :-) Ofcourse command history is running by default.Everything was Ok. Then I read some FAQ and man and some programs need $EDITOR set. So I use vi for it,which is my preferred editor.Then I lost functions for command history.I was looking what can be wrong and undo some changes in .profile.$EDITOR was it. I thought,that 'export EDITOR=/usr/bin/vi' is enough -> my fault. I don't read whole ksh man page yet (don't beat me please:-)). Maybe it's ...
Jun 11, 2:22 am 2008
Tomas Bodzar
Re: command history in ksh missed when I set $EDITOR
I was read man page about ksh and found 'set -o emacs' and so on (BTW man pages are great source),but command history is running by default after install. Problem start after I setup $EDITOR in .profile .Looks like something is fighting with something,but can't find what. Can $EDITOR affect this default behavior (running command history after install)? -----Original Message----- From: Paul de Weerd [mailto:weerd@weirdnet.nl] Sent: Wednesday, June 11, 2008 10:23 AM To: Tomas Bodzar Cc: ...
Jun 11, 1:30 am 2008
Jesus Sanchez
make build question
Hi, using 4.2. Can I do a "make build" of the base system without set previously a DESTDIR, and after the build take the bins I want from the /usr/obj tree?? Thanks for all. -Jesus
Jun 11, 12:50 am 2008
Hannah Schroeter
Re: make build question
Hi! What do you mean by "take"? Make build w/o DESTDIR already installs things in the running system. Does release(8) answer your question? Kind regards, Hannah.
Jun 11, 3:32 am 2008
Ryan McBride
Re: Development at the hackathon
People are working pretty much all the time, though you may notice a slight decrease in commit rate around beer o'clock (between 11pm and 1am, TZ=Canada/Mountain). At any rate, we try to keep things production-stable even during a hackathon: our productivity during the event depends on it, so you can sync and build pretty much anytime. If you run into problems check the most recent commit messages and see if it's been fixed while your machine was building.
Jun 10, 11:41 pm 2008
Theo de Raadt
Re: Development at the hackathon
Oh come on. We are being careful. The tree builds -- always. Only one commit done so far has broken something so far -- for about 3 minutes -- which none of you noticed.
Jun 11, 1:08 am 2008
Scott Learmonth
Re: Development at the hackathon
I have 2 units (almost anyway) set up now for pf-pfsync-carp-dhcpd- ipsec-blahblah-andsomeotherstuff, with some users behind it, all for testing, no production. Looking forward to keeping up with the tree when I can. Good luck in Edmondchuck, and have fun all, we look forward to reading about it all. p.s. love the shirt.
Jun 10, 11:09 pm 2008
Aaron Glenn
Re: Development at the hackathon
Is there a particular time of day most changes are committed (like pre-dinner) or should we sync and build at whim?
Jun 10, 11:19 pm 2008
Daniel Ouellet
Re: Development at the hackathon
I wanted to make a correction here as I got a comment that puzzled me and that may have created a miss understanding on my part on the way I wrote my text. If the perception have been taken by anyone as a complain, or otherwise I want to apologies for this! It's possible that some may have taken it to mean bad things and if so I am very sorry for it and that sure wasn't the intend here. If Marco took it as a complain as well I want to make sure I correct this and retract that as well ...
Jun 11, 11:14 am 2008
Theo de Raadt
Development at the hackathon
Development is really fast right now, because of the hackathon in Edmonton. We are testing as much as we can before we commit, but as always during these hackathon processes we really depend on our user community -- to track our changes and help spot the occasional bug we accidentally introduce. We are developing really fast and hard; please help us by testing really fast and hard too. There are some snapshots being made, of course, but people who are familiar with checking out their own ...
Jun 10, 10:17 pm 2008
Daniel Ouellet
Re: Development at the hackathon
Snapshots as of: Tue Jun 10 05:32:16 MDT 2008 Following Theo request for testing. Same test as previously reported and same crash 100% reproduce able and reported a few times on misc@ as well as tech@ using the multi code on amd64. So, not worst then it used to be for that. Just doing a simple: dd if=/dev/zero of=/var/test bs=1m count=1000 Doesn't do it using the single amd64 kernel, nor does it do it using either the i386 single kernel, or multi core one. Only with the ...
Jun 11, 12:11 am 2008
Henning Brauer
Re: Sloppy states
pretty much any. -- Henning Brauer, hb@bsws.de, henning@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam
Jun 10, 7:43 pm 2008
Sam Fourman Jr.
Re: Sloppy states
I also would like some insight on , 1:) exactly what is sloppy states meant to do 2:) what are some specific instances where we should use sloppy states 3:) what is a case where it would be bad to use sloppy states. Sam Fourman Jr.
Jun 10, 7:38 pm 2008
STeve Andre'
Re: Sloppy states
On Tuesday 10 June 2008 22:42:26 Henning Brauer wrote: Crud. I did not look there. Sorry for the noise, but perhaps you've warned some folks and they'll listen. --STeve Andre'
Jun 10, 8:34 pm 2008
STeve Andre'
Sloppy states
I'm looking around and don't quite get sloppy states. Looking at the code isn't quite helping. Anything else I can read? --STeve Andre'
Jun 10, 6:06 pm 2008
Henning Brauer
Re: Sloppy states
like, pf.conf(5)? sloppy Uses a sloppy TCP connection tracker that does not check sequence numbers at all, which makes insertion and ICMP teardown attacks way easier. This is intended to be used in situations where one does not see all packets of a connection, e.g. in asymmetric routing situations. Cannot be used with modulate or synproxy state. comes down to "do not use them". there are some very special circumstances where ...
Jun 10, 7:42 pm 2008
Jacob Yocom-Piatt
OT: good remote mgmt KVM switch
have dug about and not found any KVM switches that do either RDP or VNC that are reasonably priced. any suggestions on equipment of this sort would be appreciated. looking for stuff that works easily with openbsd packages, no java stuff if it can be helped. cheers, jake --
Jun 10, 6:11 pm 2008
Gilles Chehade
Re: vsftpd [more secure]
If someone had an answer for you, I guess they would have voiced it by now, so I think the best is to either assume that the safest version of vsftpd is the last version of it, and if you are not confident enough with this assumption to use another ftpd (see man ftpd(8) ?). Gilles -- Gilles Chehade http://www.poolp.org/
Jun 11, 5:42 am 2008
Janne Johansson
Re: vsftpd [more secure]
..and my reply was to a person that thinks "the Ford car owner maillist" is the optimal place to ask for driving directions from London to Paris. If the vsftpd guys/forums/maillists can't tell which of their versions is the most secure, I strongly suggest you dont run that software.
Jun 11, 1:26 am 2008
Saulo Bozzi
Re: vsftpd [more secure]
openbsd the list is composed of specialists in # nix. thus, there is no better place to learn with the best, which version is more secure, and so on. regards,,,,bye.
Jun 11, 5:29 am 2008
Joe S
Re: vsftpd [more secure]
no version of ftp software is "secure" Try "man sftp"
Jun 11, 1:17 pm 2008
Chris Cappuccio
Re: Strange routing issue
Try 4.3 as the bge driver has some fixes and people are using it in production now with lots of traffic. -- "Guys like us avoid monopolies. We like to compete." -- Bill Gates
Jun 11, 3:03 pm 2008
previous daytodaynext day
June 10, 2008June 11, 2008June 12, 2008