Re: Reducing dhclient's syslog messages

2012-07-11 Thread Otto Moerbeek
On Wed, Jul 11, 2012 at 05:04:04AM +, dukzcry wrote: Julian Smith jules at op59.net writes: ... my /var/log/daemon is getting filled with messages from the dhclient programme, looking like: Jun 1 00:09:36 server-35 dhclient: DHCPREQUEST on xl1 to xx.xx.xx.xx port 67

Re: Reducing dhclient's syslog messages

2012-07-11 Thread dukzcry
On 7/11/12 10:00 AM, Otto Moerbeek wrote: Why? Nothing a littke syslog.conf tweaking can't fix. -Otto Agreed, but here's more: 1) User may run few dhclient instances (for different interfaces, needless to say), and wish to log some, while don't log other (too verbositive ones, which

Promos para el dia del amigo!!!

2012-07-11 Thread Bonus Cupon Especial!
Si no podes visualizar este mail, ingresa a: http://news1.bonuscupon.com.ar/r.html?uid=1.1x.29hh.xk.4y053d6a9r

Re: dwm in base

2012-07-11 Thread Joerg Zinke
On Tue, Jul 10, 2012 at 08:26:28PM -0400, Sean Howard wrote: Almost everyone compiles dwm on their own, binaries are almost useless. At least amongst the users I've known. On Tue Jul 10 2012 20:52, z...@sdf.org wrote: And, last but not least, its configuration is modified by editing its

Re: dwm in base

2012-07-11 Thread Matthieu Herrb
On Tue, Jul 10, 2012 at 08:52:14PM +, z...@sdf.org wrote: Hello, there are a lot of nice window managers in OpenBSD base (fvwm, cwm, ...). I am a big fan of dwm and I think it shares the philosophy of minimalism which is important to a lot of BSD lovers. Also, it has a good code

Re: dwm in base

2012-07-11 Thread zz
On Wed, Jul 11, 2012 at 10:38:39AM +0200, Matthieu Herrb wrote: On Tue, Jul 10, 2012 at 08:52:14PM +, z...@sdf.org wrote: Hello, there are a lot of nice window managers in OpenBSD base (fvwm, cwm, ...). I am a big fan of dwm and I think it shares the philosophy of minimalism

Re: does re-injection even work?

2012-07-11 Thread Peter J. Philipp
On Tue, Jul 10, 2012 at 09:34:04PM +0200, Peter J. Philipp wrote: # pfctl -srules pass all flags S/SA block drop in on ! lo0 proto tcp from any to any port 6000:6010 block drop in on re0 inet from fuckoff to any pass in on re0 inet proto udp from any to any port = 53 scrub (reassemble tcp)

Re: does re-injection even work?

2012-07-11 Thread Stuart Henderson
On 2012-07-10, Matthew Dempsky matt...@dempsky.org wrote: On Tue, Jul 10, 2012 at 12:34 PM, Peter J. Philipp p...@centroid.eu wrote: I did this rather fast hoping to get it in for someone I know who is being used for a DNS amplifier attack but the final tests broke the hope of stopping it with

openbsd running on asus eeepc 1000H?

2012-07-11 Thread giovanni
hi misc, anybody out there w/ an asus eepc 1000H model running openbsd? I've found this netbook in a recycle hw store and I would be interested in using it for some needs. thanks -- see ya, giovanni

Re: does re-injection even work?

2012-07-11 Thread Otto Moerbeek
On Wed, Jul 11, 2012 at 11:52:41AM +0200, Peter J. Philipp wrote: On Tue, Jul 10, 2012 at 09:34:04PM +0200, Peter J. Philipp wrote: # pfctl -srules pass all flags S/SA block drop in on ! lo0 proto tcp from any to any port 6000:6010 block drop in on re0 inet from fuckoff to any pass

Re: does re-injection even work?

2012-07-11 Thread Otto Moerbeek
On Wed, Jul 11, 2012 at 12:32:09PM +0200, Otto Moerbeek wrote: On Wed, Jul 11, 2012 at 11:52:41AM +0200, Peter J. Philipp wrote: On Tue, Jul 10, 2012 at 09:34:04PM +0200, Peter J. Philipp wrote: # pfctl -srules pass all flags S/SA block drop in on ! lo0 proto tcp from any to any

Re: openbsd running on asus eeepc 1000H?

2012-07-11 Thread Kenneth R Westerback
On Wed, Jul 11, 2012 at 12:25:24PM +0200, giovanni wrote: hi misc, anybody out there w/ an asus eepc 1000H model running openbsd? I've found this netbook in a recycle hw store and I would be interested in using it for some needs. thanks -- see ya, giovanni I had OpenBSD

overload rule for outgoing floods

2012-07-11 Thread Boutros Halingrad
Hello all, I know this is really stupid, but I'm trying to mitigate the effects of one hacked server on our (very large) network that is being used to DoS other computers on the Internet. I do not have access to the server and I cannot take it down (due to different reasons), so instead I'm

Re: overload rule for outgoing floods

2012-07-11 Thread Mihai Popescu
Any ideas on how to get the attack victims added to the table? Thanks, Boutros Hire a consultant specialised in OpenBSD firewall, before the damaged part will sue you.

Re: dwm in base

2012-07-11 Thread Jim Razmus
* z...@sdf.org z...@sdf.org [120711 04:34]: On Wed, Jul 11, 2012 at 10:38:39AM +0200, Matthieu Herrb wrote: On Tue, Jul 10, 2012 at 08:52:14PM +, z...@sdf.org wrote: Hello, there are a lot of nice window managers in OpenBSD base (fvwm, cwm, ...). I am a big fan of dwm and

Re: overload rule for outgoing floods

2012-07-11 Thread Matthew Dempsky
On Wed, Jul 11, 2012 at 4:44 AM, Boutros Halingrad boutros.haling...@gmail.com wrote: Problem is, the only address that get added to the floodtargets table is that of the sending server. Right, sys/net/pf.c is hardcoded to use only the source address for the overload table. (Search for

Doubt with IPSEC

2012-07-11 Thread Rodrigo Mosconi
Hi, I`m having a problem to establish a IPSEC transport between two openbsd hosts (one with 5.1 and the other with 4.9). They are configured to use the transport mode (confs bellow). When I run isakmpd -K ; ipsecctl -f /etc/ipsec.conf on both hosts, no SA are created. What did I miss? Thanks,

Re: Doubt with IPSEC

2012-07-11 Thread Paulm
I would suggest passing the -vL option to iskampd. -v enables verbose logging which will report errors when trying to setup the SA. The -L option will create pcap file in /var/run which contains the packets exchanged to set up the SA. If you look at this pcap file w/ the verbose (-vv) option to

Re: openbsd running on asus eeepc 1000H?

2012-07-11 Thread Ben Calvert
Yes, although its been a couple months since I turned it on. As i recall, the biggest obstacle was finding a USB stick it would deign to boot from Ben :wq On Jul 11, 2012, at 3:25 AM, giovanni qgiova...@gmail.com wrote: hi misc, anybody out there w/ an asus eepc 1000H model running

Re: Doubt with IPSEC

2012-07-11 Thread Paulm
One of the two hosts needs to use 'passive' in ipsec.conf so that it acts as server and listens/responds to incoming requests from peers. On Wed, Jul 11, 2012 at 02:23:13PM -0300, Rodrigo Mosconi wrote: Hi, I`m having a problem to establish a IPSEC transport between two openbsd hosts (one

apple : mac : mini : intel : core i5 : 5.2 : support?

2012-07-11 Thread Mayuresh Kathe
would it be there? http://www.openbsd.org/plat.html shows nothing. googling around too showed information not upto date (from my location). need a reliable desktop system with a good resale value, hence a mac mini. :) thanks. -- simplicity can be marvelously powerful. - rahul jindal

Re: SIL 3512 sata card dma errors

2012-07-11 Thread Chris Cappuccio
LEVAI Daniel [l...@ecentrum.hu] wrote: 2) jmb0 at pci1 dev 0 function 0 JMicron JMB363 IDE/SATA rev 0x03 Worked nicely. According to systat it provided around 30MB/sec write speed, whereas the SiI3512A only had around 20MB/sec. This is good to know, I'm sure I'll prefer this kind of

Re: apple : mac : mini : intel : core i5 : 5.2 : support?

2012-07-11 Thread Chris Cappuccio
OpenBSD/amd64 and OpenBSD/i386 both support Core i5 based machines. Mayuresh Kathe [mayur...@kathe.in] wrote: would it be there? http://www.openbsd.org/plat.html shows nothing. googling around too showed information not upto date (from my location). need a reliable desktop system with a

Re: apple : mac : mini : intel : core i5 : 5.2 : support?

2012-07-11 Thread Jan Stary
On Jul 11 20:56:24, Mayuresh Kathe wrote: would it be there? http://www.openbsd.org/plat.html shows nothing. googling around too showed information not upto date (from my location). need a reliable desktop system with a good resale value, hence a mac mini. :) Mine is not core i5, but runs

Re: Doubt with IPSEC

2012-07-11 Thread Rodrigo Mosconi
2012/7/11 Paulm pa...@tetrardus.net: One of the two hosts needs to use 'passive' in ipsec.conf so that it acts as server and listens/responds to incoming requests from peers. On Wed, Jul 11, 2012 at 02:23:13PM -0300, Rodrigo Mosconi wrote: Hi, I`m having a problem to establish a IPSEC

bsd.rd anonymous ftp login broken?

2012-07-11 Thread Jan Stary
Trying to reinstall with the current i386/bsd.rd. All goes well until I actually select a ftp mirror, and asked for the ftp login, I accept the default of 'anonymous'. It keeps asking: ftp login ? anonymous [enter] ftp login ? anonymous [enter] ftp login ? anonymous

Re: bsd.rd anonymous ftp login broken?

2012-07-11 Thread Bryan Irvine
On Wed, Jul 11, 2012 at 12:55 PM, Jan Stary h...@stare.cz wrote: Trying to reinstall with the current i386/bsd.rd. All goes well until I actually select a ftp mirror, and asked for the ftp login, I accept the default of 'anonymous'. It keeps asking: ftp login ? anonymous [enter]

Re: SIL 3512 sata card dma errors

2012-07-11 Thread Robert
On Sun, 8 Jul 2012 22:46:59 +0200 LEVAI Daniel l...@ecentrum.hu wrote: My errors were triggered when I was copying from disk1 to disk2, both connected to the SIL card. (in this case this was a 2 port card), not when copying something in parallel to both disks from a separate location. I think

Su Tarjeta Ha Sido Temporalmente Suspendida!

2012-07-11 Thread info
BBVA - Particulares SEGURIDAD. Le informamos que el accesso a su cuenta BBVAnet ha sido restringido por razones de seguridad. Para seguir utilizando los servicios de Banca por Internet de BBVA, debe reactivar su CLAVE DE ACCESO REACTIVACION Acuda a una de las oficinas de BBVA, o bien utilice

Re: bsd.rd anonymous ftp login broken?

2012-07-11 Thread Jan Stary
On Jul 11 13:13:39, Bryan Irvine wrote: On Wed, Jul 11, 2012 at 12:55 PM, Jan Stary h...@stare.cz wrote: Trying to reinstall with the current i386/bsd.rd. All goes well until I actually select a ftp mirror, and asked for the ftp login, I accept the default of 'anonymous'. It keeps asking:

Re: bsd.rd anonymous ftp login broken?

2012-07-11 Thread Alexander Polakov
* Jan Stary h...@stare.cz [120712 01:55]: Trying to reinstall with the current i386/bsd.rd. All goes well until I actually select a ftp mirror, and asked for the ftp login, I accept the default of 'anonymous'. It keeps asking: ftp login ? anonymous [enter] ftp login ? anonymous

Re: bsd.rd anonymous ftp login broken?

2012-07-11 Thread David Diggles
Use http then? To get you out of trouble. Since other people dont have the problem, something fishy going on at your ISP? I was once with an ISP that had a transparent proxy for http. I noticed because it was serving dated content, and the IP address on my remote server logs were not my own.

birds of feather flocked together

2012-07-11 Thread Mayuresh Kathe
anyone with expertise in setting up infrastructure for a small (3 member) team of volunteers doing part-time development for openbsd? the development effort will last for 12 months starting august 2012. no remuneration involved nor intent to fork. :) thanks.

relayd - url filtering actions?

2012-07-11 Thread Joakim Dellrud
Hello! I have a fun problem: 2 webhosts (backends) 1 relayd (loadbalancer) Some webapplications BUT one of the webapplications does not scale on a loadbalanced system so I need to use a specific backend to get that to work: so if users surfs to app.domain.tld/ they will go to either backend but