Re: 4.2 i386 install fails on a HP Compaq dc7700

2007-12-12 Thread Richard Toohey
On 12/12/2007, at 8:38 PM, Ioan Nemes wrote: Greetings, Try to install OpenBSD 4.2 i386 on a new HP Compaq dc7700 Small Form Factor, but when it comes to install the software sets from the CD, the install fails: [cut] Which one contains the install media? (or `done`) [cd0]

Re: Real men don't attack straw men

2007-12-12 Thread L
Richard Stallman wrote: Why don't you ask Theo, whom you once praised, about OpenBSD? Because he tends to be unfriendly. Assuming and/or judging that someone is unfriendly, is an unfriendly act itself. Publicly stating on a mailing list that someone 'tends' to be unfriendly is a

Re: Real men don't attack straw men

2007-12-12 Thread Richard Stallman
As a last question. Will gNewSense become non-free if I start a ports-like software install package project for it? If your install package has ports for non-free software, then it would promote non-free software. If it were included in or recommended by gNewSense, then gNewSense would

Re: Real men don't attack straw men

2007-12-12 Thread Richard Stallman
So, an operating system can born free (free as in speech, in the GNU sense) and then, become non-free just because some users decided to create a way to ease installations of software that just can't be shipped with the system? You've formulated a very broad description, which

Re: Real men don't attack straw men

2007-12-12 Thread Richard Stallman
Well, it seems that we have the following pattern: - gNewSense, if someone finds a non-free program in it, that's no disaster - anything else, if someone finds a non free program in it, that's surely a disaster Please, sir, clarify The words I posted before ought to

login_radius possible changes.

2007-12-12 Thread Brad Arrington
Would it be possible to change login_radius.c actually raddauth.c so that: 1. The admin can change what port login_radius uses, such as the old datametrics port. It is currently hard coded to radius(1812). 2. Make it so it does not try an empty password 2 times before it kicks back a prompt

Re: login_radius possible changes.

2007-12-12 Thread Otto Moerbeek
On Wed, Dec 12, 2007 at 12:40:15AM -0800, Brad Arrington wrote: Would it be possible to change login_radius.c actually raddauth.c so that: 1. The admin can change what port login_radius uses, such as the old datametrics port. It is currently hard coded to radius(1812). 2. Make it so it

Re: : rouge IPs / user

2007-12-12 Thread knitti
I have to correct myself a bit: the socket is in CLOSE_WAIT after receiving the clients FIN (and acknowledging it). The server hasn't yet sent its FIN, so the connection is properly half closed, the server _could_ send some data down the line as its part of the connection is still up. Translation:

Re: Real men don't attack straw men

2007-12-12 Thread Mattieu Baptiste
On Dec 12, 2007 9:37 AM, Richard Stallman [EMAIL PROTECTED] wrote: If some users write a way to ease installation of some non-free program, and distribution D doesn't include this way in its distribution or publicize it, then those users have done something bad but distribution D is not

Re: Real men don't attack straw men

2007-12-12 Thread Kyle George
On Tue, 11 Dec 2007, Richard Stallman wrote: Including a program by name in the ports system does suggest using that program. It grants the program a sort of legitimacy, and that is what I am opposed to. If a library has a book on [insert-controversial-topic-here], does that imply

Re: Real men don't attack straw men

2007-12-12 Thread ropers
On 12/12/2007, Richard Stallman [EMAIL PROTECTED] wrote: As a last question. Will gNewSense become non-free if I start a ports-like software install package project for it? If your install package has ports for non-free software, then it would promote non-free software. If it were

route to vpn network by vpn link

2007-12-12 Thread sonjaya
Dear all I have 3 subnetwork in my lan ( 192.168.1.0/24 ( net_a), 192.168.2.0/24(net_b), 172.16.0.0/16(net_c)). I made vpn tunelin from net_a to net_b also to net_c. net_b--(vpn-client_b_to_a)--internet ---((vpn_gw_a)net_a)---lan--(vpn_client_a_to_c)---internet--((net_c)vpn_gw_c) Bellow network

Re: Real men don't attack straw men

2007-12-12 Thread ropers
On 12/12/2007, ropers [EMAIL PROTECTED] wrote: On 12/12/2007, Richard Stallman [EMAIL PROTECTED] wrote: As a last question. Will gNewSense become non-free if I start a ports-like software install package project for it? If your install package has ports for non-free software,

PPP console client

2007-12-12 Thread mgb
List, I'm running 4.1 GENERIC on 386 and need an interface to PPP, however I have no X installed. Ideally an program that just uses the ppp.conf dialers and allows the user to select which to dial. Maybe it would be easier to just do it myself... Grateful for any suggestions mgb

Re: 4.2 i386 install fails on a HP Compaq dc7700

2007-12-12 Thread mufurcz
Richard Toohey wrote: On 12/12/2007, at 8:38 PM, Ioan Nemes wrote: Greetings, Try to install OpenBSD 4.2 i386 on a new HP Compaq dc7700 Small Form Factor, but when it comes to install the software sets from the CD, the install fails: [cut] Which one contains the install media? (or `done`)

Re: Real men don't attack straw men

2007-12-12 Thread Marcus Andree
On 12/12/07, ropers [EMAIL PROTECTED] wrote: On 12/12/2007, ropers [EMAIL PROTECTED] wrote: On 12/12/2007, Richard Stallman [EMAIL PROTECTED] wrote: As a last question. Will gNewSense become non-free if I start a ports-like software install package project for it? If

Re: 4.2 i386 install fails on a HP Compaq dc7700

2007-12-12 Thread Nick Holland
Ioan Nemes wrote: Greetings, Try to install OpenBSD 4.2 i386 on a new HP Compaq dc7700 Small Form Factor, but when it comes to install the software sets from the CD, the install fails: ... Let's install the sets! Location of sets? (cd disk ftp or `done`) [cd] Available CD-ROMs are: cd0

Re: 4.2 i386 install fails on a HP Compaq dc7700

2007-12-12 Thread mufurcz
Nick Holland wrote: Ioan Nemes wrote: Greetings, Try to install OpenBSD 4.2 i386 on a new HP Compaq dc7700 Small Form Factor, but when it comes to install the software sets from the CD, the install fails: ... Let's install the sets! Location of sets? (cd disk ftp or `done`) [cd]

Re: route to vpn network by vpn link

2007-12-12 Thread Joseph C. Bender
sonjaya wrote: [Trimmed for length] --- == I can akses comp in net_a from net_b ( ping running application etc) I can remote comp in net_b from net_a ( ping , remote , print ( jetdirect ), etc ) I

Re: Real men don't attack straw men

2007-12-12 Thread Iñigo Tejedor Arrondo
2007/12/12, ropers [EMAIL PROTECTED]: [...] that there is a ports.tar.gz file on the CD. HOWEVER, that file is not installed by default, and the OpenBSD install program *does not even give the user the option* to install ports.tar.gz, be it from CD or otherwise. See here:

Re: Real men don't attack straw men

2007-12-12 Thread ropers
On 12/12/2007, Richard Stallman [EMAIL PROTECTED] wrote: If your install package has ports for non-free software, then it would promote non-free software. If it were included in or recommended by gNewSense, then gNewSense would promote non-free software. I trust they wouldn't do that,

arpwatch watching multiple interfaces?

2007-12-12 Thread Falk Brockerhoff
Hello, does arpwatch (or any other kind of such tools you can suggest) supports watching multiple interfaces at once? I have one physical interface with several vlans configured on it and the same count of carp interface on top of the vlans. I would like to have a look at the known-arp addresses

Re: halt -p/reboot - ddb (was Re: halt -p: Stopped at gettick+0xec: inb $0x40,%al)

2007-12-12 Thread Stuart Henderson
same box ... -current MP, looks like two ddb running at the same time. # reboot /etc/rc.shutdown in progress... /etc/rc.shutdown complete. sycing disks... done pSatnoipcp:e dm taxt_enter: lockin g a g ai_n_mspt_ lmoycske+l0fx ep:a nmiocv:l mtx_enter : lo 0cxki4n(g% eadgxa)i,n%seta xm3

Re: 4.2 i386 install fails on a HP Compaq dc7700

2007-12-12 Thread mufurcz
Nick Holland wrote: Ioan Nemes wrote: Greetings, Try to install OpenBSD 4.2 i386 on a new HP Compaq dc7700 Small Form Factor, but when it comes to install the software sets from the CD, the install fails: ... Let's install the sets! Location of sets? (cd disk ftp or `done`) [cd]

Re: : : rouge IPs / user

2007-12-12 Thread Raimo Niskanen
On Wed, Dec 12, 2007 at 10:11:05AM +0100, knitti wrote: I have to correct myself a bit: the socket is in CLOSE_WAIT after receiving the clients FIN (and acknowledging it). The server hasn't yet sent its FIN, so the connection is properly half closed, the server _could_ send some data down the

Re: no 4.2-stable package updates??

2007-12-12 Thread ico
So if there are security bugs in a package or port shipped with OpenBSD 4.2, there will be no updated package or updated port available? That is correct. -- Antoine How do you gents keep your 4.2 stable OpenBSD server ( read packages, not system ) bug free? If I remember correctly, I'm

Re: no 4.2-stable package updates??

2007-12-12 Thread Antoine Jacoutot
On Wed, 12 Dec 2007, ico wrote: How do you gents keep your 4.2 stable OpenBSD server ( read packages, not system ) bug free? If I remember correctly, I'm not supposed to use 4.2 stable system with current ports. Personnaly, I use -current (base+packages) everywhere. But this is just me. --

Re: arpwatch watching multiple interfaces?

2007-12-12 Thread Markus Lude
On Wed, Dec 12, 2007 at 02:37:12PM +0100, Falk Brockerhoff wrote: Hello, does arpwatch (or any other kind of such tools you can suggest) supports watching multiple interfaces at once? I have one physical interface with several vlans configured on it and the same count of carp interface on

Re: Real men don't attack straw men

2007-12-12 Thread Rodrigo V. Raimundo
On Wednesday 12 December 2007 06:37, Richard Stallman wrote: However, if distribution D includes this easier way to install in its ports system, by doing so distribution D endorses it and takes on the ethical responsibility for it. Using the same argument I can say that gcc isn't ethical

Re: no 4.2-stable package updates??

2007-12-12 Thread Brian A. Seklecki
There's a vulnxml feed for OpenBSD ports. It should be updated with critical patches, and those should be pulled into 4.2-stable. If your business depends on OpenBSD ports, maybe you can sponsor a 4.2-stable build sandbox. I know mine does, and I'm happy to host it. We're talking at-most 30

Re: Real men don't attack straw men

2007-12-12 Thread Jacob Yocom-Piatt
Mattieu Baptiste wrote: On Dec 12, 2007 9:37 AM, Richard Stallman [EMAIL PROTECTED] wrote: If some users write a way to ease installation of some non-free program, and distribution D doesn't include this way in its distribution or publicize it, then those users have done something bad but

Re: Real men don't attack straw men

2007-12-12 Thread Marc Espie
On Wed, Dec 12, 2007 at 03:37:31AM -0500, Richard Stallman wrote: However, if distribution D includes this easier way to install in its ports system, by doing so distribution D endorses it and takes on the ethical responsibility for it. Nope. Users have responsability for what they do. We do

Re: : no 4.2-stable package updates??

2007-12-12 Thread Raimo Niskanen
On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: Wow. I didn't know this changed. This was announced on ports@ IIRC. So if there are security bugs in a package or port shipped with OpenBSD 4.2, there will be no updated package or updated

Re: login_radius possible changes.

2007-12-12 Thread Brad Arrington
Hi Otto, Thank you for looking at this. My question is now what would be the right way to do this...? This radius server(AAA) has a 3 try lock out. Without this patch login_radius checks 2 times with a blank password which will allow the user only 1 chance to enter a correct password before it

NAT to FTP SFTP

2007-12-12 Thread Joe Spenceley
Hi, I've a BSD box listening to FTP and SFTP traffic. I can connect to it fine from within the LAN but I have been unable to reach it through our NATing firewall. In the past I've had no problems NATing through to the Windows FTP server that this box is replacing. Current network setup is:

Re: : : rouge IPs / user

2007-12-12 Thread knitti
On 12/12/07, Raimo Niskanen [EMAIL PROTECTED] wrote: * A httpd server socket enters CLOSE_WAIT when the client closes (or half-closes) its end and sends FIN to the server TCP stack that replies ACK and enters CLOSE_WAIT. The socket proceeds out of CLOSE_WAIT when httpd calls close()

Re: : no 4.2-stable package updates??

2007-12-12 Thread Theo de Raadt
On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: Wow. I didn't know this changed. This was announced on ports@ IIRC. So if there are security bugs in a package or port shipped with OpenBSD 4.2, there will be no updated package or

Re: Real men don't attack straw men

2007-12-12 Thread Andrés
To: list Richard's words are the essence of the Free Software Foundation and the GNU General Public License: people _must_ use free software, people _can_ decide whether to use free software or not, but people _must not_ be free to exercise that desire. I will explain that last statement, since

Re: Real men don't attack straw men

2007-12-12 Thread michael hamerski
Mine is more free than yours is usually a pointless discussion, even more so when the participants cannot even agree on the definition of free. Stallman conveniently omits the fact that his definition of free was, is and will be at odds with that of a significant portion of the free software

Re: : no 4.2-stable package updates??

2007-12-12 Thread Marc Balmer
Raimo Niskanen wrote: On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: Wow. I didn't know this changed. This was announced on ports@ IIRC. So if there are security bugs in a package or port shipped with OpenBSD 4.2, there will be no updated

Re: HUAWEI not recognized properly (3 modem)

2007-12-12 Thread Felix Kronlage
On Tue, Dec 11, 2007 at 04:58:18PM +0100, [EMAIL PROTECTED]@mgedv.net wrote: i'm currently testing the c-code which is provided there (i'm not a guru) but the first one does not look that bad (there are some errors and problems which i do not really have the time right now to look into). the

Getting envolved

2007-12-12 Thread Mathieu Stumpf
Hello, First I apologize if this is not the good address to post this kind of message. I didn't find a 'getting involved' link on the 0penBSD website. Well, OpenBSD seems to care about quality, so as a developper I thought this would be a good place to learn how to write better software. To my

Re: HUAWEI not recognized properly (3 modem)

2007-12-12 Thread Felix Kronlage
On Tue, Dec 11, 2007 at 04:58:18PM +0100, [EMAIL PROTECTED]@mgedv.net wrote: i'm currently testing the c-code which is provided there (i'm not a guru) but the first one does not look that bad (there are some errors and problems which i do not really have the time right now to look into).

Re: no 4.2-stable package updates??

2007-12-12 Thread jere
I tried using pkgsrc-2007Q3 but it sucks. Updating userland in production environment with pkgsrc on a non-NetBSD platform is a nightmare. -Original Message- From: ico [EMAIL PROTECTED] Date: Wed, 12 Dec 2007 16:53:03 To:Antoine Jacoutot [EMAIL PROTECTED] Cc:Joe [EMAIL

Re: no 4.2-stable package updates??

2007-12-12 Thread Marc Balmer
ico wrote: So if there are security bugs in a package or port shipped with OpenBSD 4.2, there will be no updated package or updated port available? That is correct. -- Antoine How do you gents keep your 4.2 stable OpenBSD server ( read packages, not system ) bug free? I run build

Re: Real men don't attack straw men

2007-12-12 Thread Marcus Andree
On 12/12/07, Rodrigo V. Raimundo [EMAIL PROTECTED] wrote: On Wednesday 12 December 2007 06:37, Richard Stallman wrote: However, if distribution D includes this easier way to install in its ports system, by doing so distribution D endorses it and takes on the ethical responsibility for it.

Re: httpdv6

2007-12-12 Thread Marc Balmer
for the time being, I changed the diff to use IPv4 as the default. I build a (local and unoffcial) snapshot with it and deployed it on our production servers. There is no problem known to me atm. And update changed nothing, but allowed me to _optionally_ turn on IPv6 support. If you want to

Re: : no 4.2-stable package updates??

2007-12-12 Thread knitti
On 12/12/07, Raimo Niskanen [EMAIL PROTECTED] wrote: On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: So if there are security bugs in a package or port shipped with OpenBSD 4.2, there will be no updated package or updated port available?

Re: Getting envolved

2007-12-12 Thread Bob Beck
* Mathieu Stumpf [EMAIL PROTECTED] [2007-12-12 11:23]: Hello, First I apologize if this is not the good address to post this kind of message. I didn't find a 'getting involved' link on the 0penBSD website. Well, OpenBSD seems to care about quality, so as a developper I thought this would

Re: : : rouge IPs / user

2007-12-12 Thread Daniel Ouellet
Raimo Niskanen wrote: Interesting for me too, and most probably for others. It became an interesting discussion of my CLOSE_WAIT problem after all... To summarize (as I see it): * pf synproxy state does not affect these CLOSE_WAIT sockets since the SYN proxy is only active during connection

Re: Getting envolved

2007-12-12 Thread Ted Unangst
On 12/12/07, Mathieu Stumpf [EMAIL PROTECTED] wrote: To my mind software quality also depends on ease of use. So I would be happy to help improve OpenBSD by making it easier to install and use. But I don't know if you would be interesting by this kind of 'improvement'. I don't want to waste

Re: Azalia driver locks up computer Sony SZ460N

2007-12-12 Thread Rob Lytle
Hi Deanna, Yes it appears that you are correct as just KDE does it now. I just recompiled KDE and that didn't help so next is cvsup, new kernel, and new world. Thanks, Rob. -- Emancipate yourself from mental slavery, none but ourselves can free our minds Bob Marley, Redemption Song

Re: Getting envolved

2007-12-12 Thread Marco Peereboom
1. Pick an area that you are interested in. 2. Fix bug / add useful (non superfluous feature) 3. Send diff to tech@ 4. Await flames or see diff getting committed 5. Repeat several time until someone notices good quality and you'll get invited to play We are always looking for good people. On

Re: Getting envolved

2007-12-12 Thread Karl Sjodahl - dunceor
On Dec 12, 2007 6:31 PM, Mathieu Stumpf [EMAIL PROTECTED] wrote: Hello, First I apologize if this is not the good address to post this kind of message. I didn't find a 'getting involved' link on the 0penBSD website. Well, OpenBSD seems to care about quality, so as a developper I thought

Re: login_radius possible changes.

2007-12-12 Thread Otto Moerbeek
On Wed, Dec 12, 2007 at 08:47:54AM -0800, Brad Arrington wrote: Hi Otto, Thank you for looking at this. My question is now what would be the right way to do this...? This radius server(AAA) has a 3 try lock out. Without this patch login_radius checks 2 times with a blank password

Re: : : rouge IPs / user

2007-12-12 Thread Daniel Ouellet
knitti wrote: The problem would be to forget calling ap_bclose() after ending a connection, either because all data has been sent or the connection has been aborted. What I can read with some confidence, is that keeping a socket open beyond sending any data is not intentional, and there is

pftop showing weird output.

2007-12-12 Thread Preston Kutzner
I've been trying to search for a reason this is happening, but I haven't been able to find anything. I'm running pftop under OpenBSD 4.2 on a Soekris net5501 and am getting the following output: pfTop: Up State 1-57/212, View: default, Order: none, Cache: 1 11:57:07 PRDIR SRC

Re: : no 4.2-stable package updates??

2007-12-12 Thread knitti
On 12/12/07, Darren Spruell [EMAIL PROTECTED] wrote: Why -current? I thought what had fallen behind from lack of resources was binary packages. Surely OPENBSD_4_2 (stable branch of ports tree) still has updated ports. Just build -stable packages from ports (like you did in the olden days.)

sasyncd peer

2007-12-12 Thread Tom Bombadil
Hi all... Is there any side effect of having both local and remote IPs in the peer directives in sasyncd.conf? For example: server1: 10.0.0.2 server2: 10.0.0.3 carp:10.0.0.1 So, can I have in both sasyncd.conf: --- peer 10.0.0.2 peer 10.0.0.3 --- The idea is to avoid different

Re: rouge IPs / user

2007-12-12 Thread Dan Farrell
SPEWS is an excellent example of why trusting strangers on the Internet that you can't even communicate with doesn't work. danno -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Guenther Sent: Friday, December 07, 2007 11:13 PM To: OpenBSD-Misc

Re: : no 4.2-stable package updates??

2007-12-12 Thread Darren Spruell
On Dec 12, 2007 11:41 AM, knitti [EMAIL PROTECTED] wrote: On 12/12/07, Raimo Niskanen [EMAIL PROTECTED] wrote: On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: So if there are security bugs in a package or port shipped with OpenBSD 4.2,

Re: : : rouge IPs / user

2007-12-12 Thread knitti
On 12/12/07, Daniel Ouellet [EMAIL PROTECTED] wrote: Raimo Niskanen wrote: Interesting for me too, and most probably for others. It became an interesting discussion of my CLOSE_WAIT problem after all... To summarize (as I see it): * pf synproxy state does not affect these CLOSE_WAIT

Re: pftop showing weird output.

2007-12-12 Thread Preston Kutzner
On Wed, 12 Dec 2007 11:59:50 -0600 Preston Kutzner [EMAIL PROTECTED] wrote: I've been trying to search for a reason this is happening, but I haven't been able to find anything. I'm running pftop under OpenBSD 4.2 on a Soekris net5501 and am getting the following output: --snip--- I am

pfsync not closing TCP state?

2007-12-12 Thread Matthew Dempsky
I have two OpenBSD 4.2 machines, box1 and box2. They have public IPs 1.1.1.1 and 1.1.1.2 and a direct Ethernet connection with 10.88.0.1 and 10.88.0.2. They share a carp interface configured for 1.1.1.5 (box1 is the master; preempt is enabled), and pfsync is configured on the direct Ethernet.

Re: : : rouge IPs / user

2007-12-12 Thread Daniel Ouellet
knitti wrote: * pf synproxy state does not affect these CLOSE_WAIT sockets since the SYN proxy is only active during connection establishement. But it is a good to use anyway since it prevents IP spoofing. Why not? Just test it out. What happen if you get a DDoS on your httpd as an example,

Re: : no 4.2-stable package updates??

2007-12-12 Thread STeve Andre'
On Wednesday 12 December 2007 12:25:40 Theo de Raadt wrote: On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: Wow. I didn't know this changed. This was announced on ports@ IIRC. So if there are security bugs in a package or port

Re: : no 4.2-stable package updates??

2007-12-12 Thread Steven Surdock
knitti wrote: On 12/12/07, Raimo Niskanen [EMAIL PROTECTED] wrote: On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: Now, this will prevent me from upgrading to 4.2. It isn't so that any pre-4.2-stable will be updated, so you lose nothing

Re: login_radius possible changes.

2007-12-12 Thread Otto Moerbeek
On Wed, Dec 12, 2007 at 07:35:36PM +0100, Otto Moerbeek wrote: On Wed, Dec 12, 2007 at 08:47:54AM -0800, Brad Arrington wrote: Hi Otto, Thank you for looking at this. My question is now what would be the right way to do this...? This radius server(AAA) has a 3 try lock out.

Re: : : rouge IPs / user

2007-12-12 Thread knitti
On 12/12/07, Daniel Ouellet [EMAIL PROTECTED] wrote: I am only saying that using PF in front of httpd will reduce the possible number of httpd close_wait you might see. By default httpd can only support up to 256 connections, unless you increase it and compile it again. I don't understand why

Re: : : rouge IPs / user

2007-12-12 Thread knitti
On 12/12/07, Daniel Ouellet [EMAIL PROTECTED] wrote: knitti wrote: The problem would be to forget calling ap_bclose() after ending a connection, either because all data has been sent or the connection has been aborted. What I can read with some confidence, is that keeping a socket open

Re: login_radius possible changes.

2007-12-12 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Brad Arrington (bradla): Would it be possible to change login_radius.c actually raddauth.c so that: 1. The admin can change what port login_radius uses, such as the old datametrics port. It is currently hard coded to radius(1812). I have no

Re: : no 4.2-stable package updates??

2007-12-12 Thread Darren Spruell
On Dec 12, 2007 1:11 PM, knitti [EMAIL PROTECTED] wrote: On 12/12/07, Darren Spruell [EMAIL PROTECTED] wrote: Why -current? I thought what had fallen behind from lack of resources was binary packages. Surely OPENBSD_4_2 (stable branch of ports tree) still has updated ports. Just build

Re: httpdv6

2007-12-12 Thread Stuart Henderson
On 2007/12/12 18:57, Marc Balmer wrote: for the time being, I changed the diff to use IPv4 as the default. I build a (local and unoffcial) snapshot with it and deployed it on our production servers. There is no problem known to me atm. And update changed nothing, but allowed me to

Re: : : rouge IPs / user

2007-12-12 Thread Daniel Ouellet
knitti wrote: On 12/12/07, Daniel Ouellet [EMAIL PROTECTED] wrote: I am only saying that using PF in front of httpd will reduce the possible number of httpd close_wait you might see. By default httpd can only support up to 256 connections, unless you increase it and compile it again. I don't

Re: : : rouge IPs / user

2007-12-12 Thread knitti
On 12/12/07, Daniel Ouellet [EMAIL PROTECTED] wrote: net.inet.tcp.keepidle net.inet.tcp.keepinittime net.inet.tcp.keepintvl net.inet.tcp.rstppslimit net.inet.tcp.synbucketlimit net.inet.tcp.syncachelimit nope, shoudn't apply, unless my TCP knowledge is wrong or there is a bug, which makes

Re: HUAWEI not recognized properly (3 modem)

2007-12-12 Thread Markus Bergkvist
I'll test it as soon as I get a chance, currently my laptop gets a page fault and enters ddb during boot :-/ Also, I could not apply your diff on -current. Below is an updated diff. BR, Markus --- sys/dev/usb/umsm.c.orig Wed Dec 12 22:21:44 2007 +++ sys/dev/usb/umsm.c Wed Dec 12 22:14:21

Re: Real men don't attack straw men

2007-12-12 Thread William Boshuck
On Tue, Dec 11, 2007 at 02:47:00PM -0700, Theo de Raadt wrote: On Tue, Dec 11, 2007 at 02:00:14PM -0500, Richard Stallman wrote: ... I was also told that OpenBSD's ports system includes non-free programs. Is that accurate too? [William Boshuck replied:] Strictly speaking, no.

Re: Real men don't attack straw men

2007-12-12 Thread Marti Martinez
On Dec 12, 2007 10:25 AM, Marcus Andree [EMAIL PROTECTED] wrote: A possible solution would be to... Summary of this thread: RMS doesn't support OpenBSD. Where here is there a problem waiting for a solution? Marti -- Systems Programmer, Principal Electrical Computer Engineering The

Re: no 4.2-stable package updates??

2007-12-12 Thread Matthias Kilian
On Wed, Dec 12, 2007 at 11:26:13AM -0500, Brian A. Seklecki wrote: There's a vulnxml feed for OpenBSD ports. It should be updated with critical patches, and those should be pulled into 4.2-stable. Unfortunately, it isn't that easy. Some updates imply updates of depending ports (e.g. poppler

Re: : : rouge IPs / user

2007-12-12 Thread Otto Moerbeek
On Wed, Dec 12, 2007 at 10:42:23PM +0100, knitti wrote: On 12/12/07, Daniel Ouellet [EMAIL PROTECTED] wrote: net.inet.tcp.keepidle net.inet.tcp.keepinittime net.inet.tcp.keepintvl net.inet.tcp.rstppslimit net.inet.tcp.synbucketlimit net.inet.tcp.syncachelimit nope, shoudn't apply,

Re: Real men don't attack straw men

2007-12-12 Thread Jack J. Woehr
On Dec 12, 2007, at 3:15 PM, Marti Martinez wrote: Summary of this thread: RMS doesn't support OpenBSD. Where here is there a problem waiting for a solution? Marti for chair of the next discussion!!! +1 -- Jack J. Woehr Director of Development Absolute Performance, Inc. [EMAIL PROTECTED]

Re: Real men don't attack straw men

2007-12-12 Thread Richard Stallman
Not calling someone unfriendly and just focusing on the conversation/technical details at hand, would be much more friendly.. even considering friendship wasn't the subject of discussion in the first place. Someone else attacked me on this list for not discussing this with

IPSEC with Checkpoint Sonicwall ?

2007-12-12 Thread Michael Gale
Hey, I have been asked if we can setup an IPSEC connection with a Checkpoint Sonicwall. Currently I have NO information on the remote end except that it is a Checkpoint Sonicwall :( My pass experiences using IPSEC have been on Linux with things like FreeSwan and OpenSwan. Does anyone

Re: Real men don't attack straw men

2007-12-12 Thread Richard Stallman
In the end, the only way to prevent users from running non GPL software Is there anyone here who actually proposes to prevent users from running non-GPL-covered software? Not I. I frequently run OpenSSH, whose license is not the GNU GPL, and is incompatible with the GPL (if my memory

Re: Real men don't attack straw men

2007-12-12 Thread Richard Stallman
few mentioned changes. Apples to apples comparisons I say. I adjust my repositories in a repository browser and poke away. I find java, I find tools to work with many non-free pieces of software as well. Could you explain what I adjust my repositories in a repository browser means,

Re: Azalia driver locks up computer Sony SZ460N- solved

2007-12-12 Thread Rob Lytle
It was a corrupted OS caused by so many hard reboots. Nothing to do at all with azalia. Rob. -- Emancipate yourself from mental slavery, none but ourselves can free our minds Bob Marley, Redemption Song

Re: no 4.2-stable package updates??

2007-12-12 Thread Unix Fan
This really does suck... While we as users appreciate developers hard work, A majority rely on -STABLE for updated and secure 3rd party software.. You really can't expect everyone to use -CURRENT in a production environment.. and it's been made clear that using -CURRENT ports on a -STABLE

KDE presents a distorted screen or quits in the middle of starting up

2007-12-12 Thread Rob Lytle
Hi, It takes me 3 or 4 startx's before I get a KDE screen that looks normal. When it looks bad, the terminal background is black and other contrast problems exist. Other times it simply locks up in the middle of starting up. Has any one else had these problems? Thanks, Rob. -- Emancipate

Re: Real men don't attack straw men

2007-12-12 Thread Richard Stallman
Where is your line in the sand? When does an operating system become free by your interpretation? When non-free ports frameworks are hosted outside the official OpenBSD cvs repository? On a server not owned by the OpenBSD project? If they are published by someone else,

Re: Real men don't attack straw men

2007-12-12 Thread Theo de Raadt
Not calling someone unfriendly and just focusing on the conversation/technical details at hand, would be much more friendly.. even considering friendship wasn't the subject of discussion in the first place. Someone else attacked me on this list for not discussing this

Re: IPSEC with Checkpoint Sonicwall ?

2007-12-12 Thread James Records
Little outdated, but this might help: http://cisx1.uma.maine.edu/~wbackman/vpn/ J On Dec 12, 2007 2:06 PM, Michael Gale [EMAIL PROTECTED] wrote: Hey, I have been asked if we can setup an IPSEC connection with a Checkpoint Sonicwall. Currently I have NO information on the remote

Re: Real men don't attack straw men

2007-12-12 Thread Theo de Raadt
Is there anyone here who actually proposes to prevent users from running non-free software? Not I. I think that software is unethical, and I refuse to install it, or suggest it to anyone. But I have not proposed that systems actually block its installation. Yet you were in an interview

Re: Real men don't attack straw men

2007-12-12 Thread Martin Schröder
2007/12/12, Richard Stallman [EMAIL PROTECTED]: running non-GPL-covered software? Not I. I frequently run OpenSSH, whose license is not the GNU GPL, and is incompatible with the GPL (if my memory serves). Richard, please stop spreading lies (or looking like a fool) by not doing research.

Re: 4.2 i386 install fails on a HP Compaq dc7700

2007-12-12 Thread Unix Fan
I've never seen a CD/DVD drive that uses UDMA 5, Pretty fast... but I've also never seen/used SATA extensively.. One option might be to downgrade the drive to UDMA 2 perhaps? see if that helps any?.. -Nix Fan.

Re: Real men don't attack straw men

2007-12-12 Thread Theo de Raadt
few mentioned changes. Apples to apples comparisons I say. I adjust my repositories in a repository browser and poke away. I find java, I find tools to work with many non-free pieces of software as well. Could you explain what I adjust my repositories in a repository browser

Re: no 4.2-stable package updates??

2007-12-12 Thread Matthew Dempsky
On 12 Dec 2007 14:54:59 -0800, Unix Fan [EMAIL PROTECTED] wrote: Why even have a -CURRENT ports tree? Um, to have somewhere for new and updated ports to go?

Re: no 4.2-stable package updates??

2007-12-12 Thread Marco S Hyman
Unix Fan writes: This really does suck... While we as users appreciate developers hard work, A majority rely on -STABLE for updated and secure 3rd party software.. Really? You have statistics? I'd be curious to see how many run stable vs. old releases vs. current. Why even have a

Re: no 4.2-stable package updates??

2007-12-12 Thread Rod Whitworth
On 12 Dec 2007 14:54:59 -0800, Unix Fan wrote: This really does suck... While we as users appreciate developers hard work, A majority rely on -STABLE for updated and secure 3rd party software.. So why does that majority not provide the skills or the money to support that facility? Maybe you

A very good OpenLDAP tutorial - Notes

2007-12-12 Thread badeguruji
http://www.acay.com.au/~oscarp/tutor/ for all new Openldap users. thx, and sorry if you don't need this. -BG ~~Kalyan-mastu~~

OSPF and CARP question

2007-12-12 Thread Prabhu Gurumurthy
All - This is going to be a lengthy email, Sorry about that, I have question about running CARP + OSPF, I looked at all the email pertaining to it on marc.info website? Network scenario: I have an ethernet segment (172.21.171.0/24) Cisco 1760 (.1), Cisco 2621(.4), Dell PowerConnect(.2),

  1   2   >