Re: OpenBGPD

2010-10-22 Thread Paul de Weerd
On Fri, Oct 22, 2010 at 07:41:46AM +0300, Tomas Bodzar wrote: | AMS-IX (one of the biggest EU IPX) last year switched to OpenBGPD and | they have some description of network on their pages and their stats | are quite fine I think http://www.ams-ix.net/statistics/ Yes, AMSIX have OpenBGPD

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Bret S. Lambert
On Thu, Oct 21, 2010 at 05:38:54PM +, Jay K wrote: My ideal setup would be: 1) no passwords (* in /etc/passwd or via vipw) 2) only ssh for remote access i.e. no password-based security, only something better 3) except console, where anyone should be able to login without

Re: how to repeat messages about manual configuration

2010-10-22 Thread Bret S. Lambert
On Thu, Oct 21, 2010 at 05:27:02PM +, Jay K wrote: You know, installing ports/packages often gives you random manual configuration advise, like: === Installing jdk-1.6.0.03p9 from /usr/ports/packages/amd64/all/ jdk-1.6.0.03p9: ok

Re: Can't get pptp vpn working.

2010-10-22 Thread Gregory Edigarov
sysctl net.inet.gre.allow=1 ? pass proto gre in your pf rules? On Thu, 21 Oct 2010 19:50:14 -0700 Peter Merritt pwmerr...@weirdwater.org wrote: Hate replying to my own post but anyone have any ideas on this. This for pptp pass thru not for a openbsd pptp server. Has anyone got this

Re: how to repeat messages about manual configuration

2010-10-22 Thread Raimo Niskanen
On Thu, Oct 21, 2010 at 02:34:03PM -0500, Carson Chittom wrote: On Thu, Oct 21, 2010 at 01:20:40PM -0500, Jay K wrote: 1) There should be a way to repeat all these messages for all installed packages. Maybe there already is. $ less /var/db/pkg/*/+DISPLAY 3) You may wish to add

Re: how to repeat messages about manual configuration

2010-10-22 Thread Jay K
I want the messages to tell me how to get the repeat. If there any messages, I want the instructions repeated at the end as well (on how to get the messages, not the actual messages). pkg_add | tee pkg.out ?? I shouldn't have to. What if I'm developing in a split python 2.4/2.6 environment?

Remeras publicitarias para tu empresa

2010-10-22 Thread Interesante
Queres remeras de maxima calidad? Vendemos la mejor remera publicitaria !!! Ideal para tu?NEGOCIO/EMPRESA o para regalar - NO SON DESCARTABLES - NO SE ENCOGEN - NO SE BORRA EL ESTAMPADO Desde 100 remeras en adelante: 17.90 $ mas iva Desde 1000 remeras en adelante :16,90 $ mas iva Pedido

Re: how to repeat messages about manual configuration

2010-10-22 Thread Tomas Bodzar
On Fri, Oct 22, 2010 at 12:19 PM, Jay K jay.kr...@cornell.edu wrote: I want the messages to tell me how to get the repeat. If there any messages, I want the instructions repeated at the end as well (on how to get the messages, not the actual messages). For this purpose there is FAQ and man

Re: pf anchor

2010-10-22 Thread Alex Rastaklov
forward to pool port http check http / code 200 Mistake in my copy/paste, this is the real line in my relayd.conf

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Jay K
You can get almost the same thing by setting PasswordAuthentication to no in your sshd_config file, and hand out empty or ridiculously simple passwords for the console (honestly, who would forget yermomsawhore as a password?). How do I limit their use to the console? If say I ssh in as

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Tomas Bodzar
On Fri, Oct 22, 2010 at 1:01 PM, Jay K jay.kr...@cornell.edu wrote: You can get almost the same thing by setting PasswordAuthentication to no in your sshd_config file, and hand out empty or ridiculously simple passwords for the console (honestly, who would forget yermomsawhore as a

Re: how to repeat messages about manual configuration

2010-10-22 Thread Carson Chittom
On Thu, Oct 21, 2010 at 05:58:29PM -0500, Jacob Meuser wrote: On Thu, Oct 21, 2010 at 02:34:03PM -0500, Carson Chittom wrote: On Thu, Oct 21, 2010 at 01:20:40PM -0500, Jay K wrote: 1) There should be a way to repeat all these messages for all installed packages. Maybe there

Mark Beihoffer has invited you to open a Google mail account

2010-10-22 Thread Mark Beihoffer
I've been using Gmail and thought you might like to try it out. Here's an invitation to create an account. You're Invited to Gmail! Mark Beihoffer has invited you to open a Gmail account. Gmail is Google's free email service, built on the idea that email can be intuitive, efficient, and fun.

Re: pf anchor

2010-10-22 Thread Alex Rastaklov
Resolved with : relayd -d -f /etc/relayd.conf ... Sorry for the noise. 2010/10/22 Alex Rastaklov alex.rastak...@gmail.com: forward to pool port http check http / code 200 Mistake in my copy/paste, this is the real line in my relayd.conf

ATENCION =??Q?informaci=F3n?= importante de Amenitie Solutions

2010-10-22 Thread Amenitie Solutions
Estimados Clientes y Amigos , les informamos que ya se encuentran en actividad nuevamente las cuentas de mail : amenit...@fibertel.com.ar amenitiesoluti...@fibertel.com.ar fragancias@fibertel.com.ar Desde ya les pedimos disculpas por alguna molestia ocasionada. Como siempre nuestras

Mirror Argentina

2010-10-22 Thread Gonzalo L. R.
Hi all, The Argentinian Mirror is going down for 2 hours (aprox) we need to change the DC, this take place tomorrow (Saturday 15:00 / 17:00 UTC/GMT -3 hours). I'll send a mail, as soon as we're back up again. Regards. -- Sending from my Computer.

Adaptec Serial ATA RAID 21610SA

2010-10-22 Thread S H
Hi misc, I'm looking for some feedback from people who might have tried using an Adaptec Serial ATA RAID 21610SA on OpenBSD. I completely understand why Theo and the rest of the developers don't include the driver in the GENERIC kernel since they were never given the documentation from Adaptec

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Owain Ainsworth
On Fri, Oct 22, 2010 at 10:01:17AM +, Jay K wrote: You can get almost the same thing by setting PasswordAuthentication to no in your sshd_config file, and hand out empty or ridiculously simple passwords for the console (honestly, who would forget yermomsawhore as a password?).

Re: Adaptec Serial ATA RAID 21610SA

2010-10-22 Thread Tomas Bodzar
It's not only problem with license, but with quality of Adaptec as a whole http://marc.info/?l=openbsd-miscm=125783114503531w=2 . But maybe it changed as there is not Adaptec anymore. On Fri, Oct 22, 2010 at 6:44 PM, S H shbulkm...@gmail.com wrote: Hi misc, I'm looking for some feedback from

Re: Adaptec Serial ATA RAID 21610SA

2010-10-22 Thread Marco Peereboom
run forest run! really, don't use adaptec raid if you like your data. On Fri, Oct 22, 2010 at 11:44:08AM -0400, S H wrote: Hi misc, I'm looking for some feedback from people who might have tried using an Adaptec Serial ATA RAID 21610SA on OpenBSD. I completely understand why Theo and the

cwm crashes on Linux when combining grouponly/movetogroup

2010-10-22 Thread Christian Neukirchen
Hi, I found this key sequence to crash cwm on Linux in CVS HEAD: Minimal .cwmrc: bind C-i grouponly2 bind CS-i movetogroup2 Run cwm, open a window (say xterm), press C-i, press CS-i, press C-i. cwm crashes on Linux with this backtrace: #0 0x76027595 in raise () from /lib/libc.so.6 #1

softraid ignorance (mine).

2010-10-22 Thread Christiano F. Haesbaert
Hi, Pardon my ignorance, but is it possible to add more drives to a RAID-5 array ? I basically can't afford to buy them all at once :(. Thanks

Re: softraid ignorance (mine).

2010-10-22 Thread Adam M. Dutko
Yes it is possible. The actual commands are dependent on the firmware and device manufacturer. For instance if you have an LSI card you'll want to look into the MegaCLI.

Re: softraid ignorance (mine).

2010-10-22 Thread Christiano F. Haesbaert
On 22 October 2010 17:08, Adam M. Dutko dutko.a...@gmail.com wrote: Yes it is possible. The actual commands are dependent on the firmware and device manufacturer. For instance if you have an LSI card you'll want to look into the MegaCLI. Maybe I wasn't clear, I'm considering softraid(4)

Broadcom BCM5709C delays with PF routing operators

2010-10-22 Thread cbc
Hello, I have 02 dual port Broadcom BCM5709CC0KPBG device running on routing/pf machine (Dell T110) - OpenBSD 4.7 amd64: b...@pci0:3:0:0:class=0x02 card=0x191714e4 chip=0x163914e4 rev=0x20 hdr=0x00 vendor = 'Broadcom Corporation' device = 'NetXtreme II Gigabit

Re: Broadcom BCM5709C delays with PF routing operators

2010-10-22 Thread Theo de Raadt
I have 02 dual port Broadcom BCM5709CC0KPBG device running on routing/pf machine (Dell T110) - OpenBSD 4.7 amd64: b...@pci0:3:0:0: class=0x02 card=0x191714e4 chip=0x163914e4 rev=0x20 hdr=0x00 vendor = 'Broadcom Corporation' device = 'NetXtreme II Gigabit Ethernet

Re: softraid ignorance (mine).

2010-10-22 Thread Tomas Bodzar
You will find a lot of answers here http://2010.asiabsdcon.org/papers/abc2010-P8B-paper.pdf But quick overview : RAID5 is still experimental and softraid can be created from 200 chunks max. On Fri, Oct 22, 2010 at 10:16 PM, Christiano F. Haesbaert haesba...@haesbaert.org wrote: On 22 October

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Jay K
Tomas, I don't understand. If I chroot then I can't do much at all right? Unless I replicate/link like the entire system, minus login. su/wheel group/sudo doesn't prevent simple running of login and typing the root password, right? Am I missing something? Maybe that ssh-only access to myself

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Jay K
Tomas, I don't understand. If I chroot then I can't do much at all right? Unless I replicate/link like the entire system, minus login. su/wheel group/sudo doesn't prevent simple running of login and typing the root password, right? Am I missing something? Maybe that ssh-only access to myself

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Jay K
Turn off sudo and don't put users you don't want to have root in the wheel group. I find what you want to be questionable though. But can't they still run login? Why questionable? I want security and convenience. I don't consider passwords to be either. physical security + ssh is what I

Re: java/amd64/4.7?

2010-10-22 Thread Jay K
ok, 1.5 built, 1.6 built, 1.7 in progress. Thanks. 1.7 ultimately fails: /usr/ports/pobj/jdk-1.7.0.00/openjdk/hotspot/agent/src/os/bsd/StubDebuggerLoc al.c:153: error: redefinition of `throw_new_debugger_exception' /usr/ports/pobj/jdk-1.7.0.00/openjdk/hotspot/agent/src/os/bsd/StubDebuggerLoc

Re: Broadcom BCM5709C delays with PF routing operators

2010-10-22 Thread cbc
Ops, sorry. I paste pciconf output instead pcidump, I tried these setup on FreeBSD too and had the same problem, both running on amd64 port. On Fri, Oct 22, 2010 at 5:25 PM, Theo de Raadt dera...@cvs.openbsd.org wrote: I have 02 dual port Broadcom BCM5709CC0KPBG device running on routing/pf

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Mark Romer
I believe you can do something like this. but I see it not really making you more secure, still questionable sed s/secure/insecure/g /etc/ttys /tmp/temp; mv /tmp/temp /etc/ttys Mark On Fri, Oct 22, 2010 at 3:56 PM, Jay K jay.kr...@cornell.edu wrote: Turn off sudo and don't put

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Tomas Bodzar
On Fri, Oct 22, 2010 at 10:52 PM, Jay K jay.kr...@cornell.edu wrote: Tomas, I don't understand. If I chroot then I can't do much at all right? B Unless I replicate/link like the entire system, minus login. You sai'd that you want to limit them, not I. su/wheel group/sudo doesn't prevent

Re: softraid ignorance (mine).

2010-10-22 Thread Christiano F. Haesbaert
On 22 October 2010 17:31, Tomas Bodzar tomas.bod...@gmail.com wrote: You will find a lot of answers here http://2010.asiabsdcon.org/papers/abc2010-P8B-paper.pdf But quick overview : RAID5 is still experimental and softraid can be created from 200 chunks max. Thanks Tomas, that would do :P.

Re: java/amd64/4.7?

2010-10-22 Thread Tomas Bodzar
Do you have release, stable, snapshot or current? Which commands you tried and what's your /etc/mk.conf ? On Fri, Oct 22, 2010 at 11:04 PM, Jay K jay.kr...@cornell.edu wrote: ok, 1.5 built, 1.6 built, 1.7 in progress. Thanks. 1.7 ultimately fails:

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Jay K
If I chroot then I can't do much at all right? Unless I replicate/link like the entire system, minus login. You sai'd that you want to limit them, not I. I just don't want them to be able to login as root. And I don't want a password for root. If they are on the console though, ok

Re: password-less console-only access and ssh remote access?

2010-10-22 Thread Tomas Bodzar
On Fri, Oct 22, 2010 at 11:53 PM, Jay K jay.kr...@cornell.edu wrote: If I chroot then I can't do much at all right? Unless I replicate/link like the entire system, minus login. You sai'd that you want to limit them, not I. I just don't want them to be able to login as root. B And I don't

various openntpd things

2010-10-22 Thread Florin Andrei
First off, see attachment for an updated version of the spec file for the portable version tarball. Changes: - version number (needs to be updated to the actual version of the release every time a new release is sent out) - replaced Copyright keyword with License - made other changes to allow

Re: Adaptec Serial ATA RAID 21610SA

2010-10-22 Thread Nick Holland
On 10/22/10 11:56, Tomas Bodzar wrote: It's not only problem with license, but with quality of Adaptec as a whole http://marc.info/?l=openbsd-miscm=125783114503531w=2 . But maybe it changed as there is not Adaptec anymore. And don't forget this follow up:

Re: various openntpd things

2010-10-22 Thread Florin Andrei
On 10/22/2010 02:09 PM, Florin Andrei wrote: First off, see attachment for an updated version of the spec file for the portable version tarball. Apparently attachments are removed. Okay, here's an online copy: http://dl.dropbox.com/u/29966/openbsd/openntpd.spec.txt -- Florin Andrei

Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Clint Pachl
I've been using an IBM Thinkpad T22 (P3 900MHz) laptop for quite some time and I want to upgrade. I am looking for some expert advice on what to upgrade to in the Thinkpad T-Series. Two main considerations: 1. Core Duo 32-bit (T60) or Core 2 Duo 64-bit (T61)? I've only used i386, should I

Re: Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Neal Hogan
On Fri, Oct 22, 2010 at 8:04 PM, Clint Pachl pa...@ecentryx.com wrote: I've been using an IBM Thinkpad T22 (P3 900MHz) laptop for quite some time and I want to upgrade. I am looking for some expert advice on what to upgrade to in the Thinkpad T-Series. Two main considerations: 1. Core Duo

Re: Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Ted Unangst
On Fri, Oct 22, 2010 at 9:04 PM, Clint Pachl pa...@ecentryx.com wrote: 1. Core Duo 32-bit (T60) or Core 2 Duo 64-bit (T61)? I've only used i386, should I think about amd64? Are you sure about that? I didn't think they made any T60s with plain Core chips, though I could be wrong. My T60 has a

Re: sys/tcp.h does not compile with _POSIX_SOURCE

2010-10-22 Thread Russell
On 10/21/2010 09:52 AM, hyjial wrote: Hi list ! There is a u_int on line 50 of sys/tcp.h. u_int is defined only if __BSD_VISIBLE is which it is not is _POSIX_SOURCE is defined. Is this intended ? Hit into this when trying to build a program which uses libsoup. Thanks, hyjial I was hit with

Re: Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Clint Pachl
Ted Unangst wrote: On Fri, Oct 22, 2010 at 9:04 PM, Clint Pachlpa...@ecentryx.com wrote: 1. Core Duo 32-bit (T60) or Core 2 Duo 64-bit (T61)? I've only used i386, should I think about amd64? Are you sure about that? I didn't think they made any T60s with plain Core chips, though I

Re: Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Clint Pachl
Neal Hogan wrote: On Fri, Oct 22, 2010 at 8:04 PM, Clint Pachlpa...@ecentryx.com wrote: I've been using an IBM Thinkpad T22 (P3 900MHz) laptop for quite some time and I want to upgrade. I am looking for some expert advice on what to upgrade to in the Thinkpad T-Series. Two main

Re: sys/tcp.h does not compile with _POSIX_SOURCE

2010-10-22 Thread Ted Unangst
On Thu, 21 Oct 2010, hyjial wrote: There is a u_int on line 50 of sys/tcp.h. u_int is defined only if __BSD_VISIBLE is which it is not is _POSIX_SOURCE is defined. Is this intended ? No. Easy fix. Index: tcp.h === RCS file:

CONGRESO NACIONAL ACA 2010 PARA SECRETARIAS EJECUTIVAS Y ASISTENTES 19-20 NOV ACAPULCO, GUERRERO.

2010-10-22 Thread Iveth Vasconcelos
[IMAGE] !Promociones Especiales para Grupos! Mayores informes responda este correo electrsnico con los siguientes datos. Empresa: Nombre: Telifono: Email: Nzmero de Interesados: Y en breve le haremos llegar la informacisn completa del evento. O bien comunmquense a nuestros telifonos un

Re: Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Luca Corti
On Fri, 2010-10-22 at 19:25 -0700, Clint Pachl wrote: I've seen T60 with Core or Core 2 selling here locally on craigslist. I figured, if I go with a 64-bit Core 2, I would just opt for the T61 with the slightly faster bus and supposedly lower acoustics. Plus they are selling for the same

Re: sys/tcp.h does not compile with _POSIX_SOURCE

2010-10-22 Thread Philip Guenther
On Fri, 22 Oct 2010, Ted Unangst wrote: On Thu, 21 Oct 2010, hyjial wrote: There is a u_int on line 50 of sys/tcp.h. u_int is defined only if __BSD_VISIBLE is which it is not is _POSIX_SOURCE is defined. Is this intended ? No. Easy fix. (This is PR 6192) Instead, how about making

Re: Adaptec Serial ATA RAID 21610SA

2010-10-22 Thread S H
Thanks for your updates to the story Nick. As I said at this time I can't replace the card but I will certainly do so as soon as I'm able. I appreciate your feedback. Shawn On Fri, Oct 22, 2010 at 8:23 PM, Nick Holland n...@holland-consulting.netwrote: On 10/22/10 11:56, Tomas Bodzar wrote:

Re: sys/tcp.h does not compile with _POSIX_SOURCE

2010-10-22 Thread Philip Guenther
On Fri, 22 Oct 2010, Philip Guenther wrote: Instead, how about making netinet/tcp.h comply with SUS/POSIX, which says that in a conforming environment this header file shall define TCP_NODELAY and may declare additional TCP_* macros, but shall not otherwise intrude on the applicatiojn