Re: switching between ethernet and wifi

2012-07-25 Thread frantisek holop
hmm, on Tue, Jul 24, 2012 at 03:47:53PM -0400, Dan Harnett said that It would be more convenient to just have trunk handle it, though. Any connections will not be disrupted and you don't have to mess around with any part of the network. You can have hotplugd(8) handle it for you.

Re: magic code in /src/sys/net/if_spppsubr.c

2012-07-25 Thread Dan Harnett
On Wed, Jul 25, 2012 at 08:02:16AM +0800, f5b wrote: /src/sys/net/if_spppsubr.c rev=1.98 1. line 3557 p opt[i++] = 0; /* TBD */ 2. see line (begin with ^L) 466 1145 1276 1991 2675 4116 4430 compare to line (insert empty line) 3150 3642 For anyone interested

Re: switching between ethernet and wifi

2012-07-25 Thread Dan Harnett
On Wed, Jul 25, 2012 at 09:59:29AM +0200, frantisek holop wrote: now the only last question remaining: should any commands be executed before removing the usb wifi? sometimes i get this: /bsd: ehci_idone: ex=0xd1f4b000 is done! I don't believe you have to execute anything before removing

Re: Unicast CARP and static arp entries

2012-07-25 Thread Henning Brauer
* Lee Verberne l...@blarg.org [2012-07-19 23:46]: A power supply failed in my 2-node OpenBSD 5.1 unicast CARP cluster recently. After the failure I noticed that the carp demote counter was being increased by output errors: carp: carp0 demoted group carp by 1 to 1 ( snderrors) I tracked

Re: pf 'synproxy state' broke for me with 5.0 - 5.1 upgrade

2012-07-25 Thread LEVAI Daniel
On k, júl 24, 2012 at 12:32:19 +0200, hvom .org wrote: Hi try : pass in on $ext_if proto tcp to $ext_ip port imap synproxy state What do you mean? This basically evaluates to the same rule. Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C

Re: Unicast CARP and static arp entries

2012-07-25 Thread Marco Pfatschbacher
On Wed, Jul 25, 2012 at 12:07:25PM +0200, Henning Brauer wrote: * Lee Verberne l...@blarg.org [2012-07-19 23:46]: A power supply failed in my 2-node OpenBSD 5.1 unicast CARP cluster recently. After the failure I noticed that the carp demote counter was being increased by output errors:

ADⅱAD【手机13928485629林】AD

2012-07-25 Thread %正
【ad】AD hoRtHxaFEvk**1**18时19分15秒 你掖蟹潮顿以脚好: 本骋指丛细辟;å…¬çƒæ‚£åº¦èµ„å§†å“ºç›®ã€‚å¸çŽ°å¹²è¡«åŠå·¢ç¢è£è¯“æ‰°æ œ‰å…¨æ°è‰˜ç«Ÿå—œä½£æ¶‚创终籽子,å›½å¼Šå–‚ä¹’æ´žé˜Žå»¶é’©åŠè¯ºç˜´å„è¡—è§ …夷谔父脑灼朴敲省铰壤豢穆噬竟仗盅窍市《国肝当吠

Inscripciones Abiertas 2do Cuatrimestre

2012-07-25 Thread difusion
DIPLOMADO EN TERAPIA SISTÉMICA La Escuela Sistémica Argentina es una institución que desarrolla actividades de formación de Terapeutas familiares sistémicos, investigación y asistencia psicológica. Director Ejecutivo: Dr. Horacio Serebrinsky - Director Académico: Dr. Marcelo R. Ceberio

sshguard

2012-07-25 Thread Hasse Hansson
Hello all. # uname -a OpenBSD odin.thorshammare.org 5.2 GENERIC#13 i386 sshguard-1.5 Are we not supposed to use the entry in /etc/syslog.conf any more ? auth.info;authpriv.info |/usr/local/sbin/sshguard I get a message on my console saying: syslogd: unknown priority name info

Re: sshguard

2012-07-25 Thread Otto Moerbeek
On Wed, Jul 25, 2012 at 02:25:44PM +0200, Hasse Hansson wrote: Hello all. # uname -a OpenBSD odin.thorshammare.org 5.2 GENERIC#13 i386 sshguard-1.5 Are we not supposed to use the entry in /etc/syslog.conf any more ? auth.info;authpriv.info |/usr/local/sbin/sshguard I get a

Re: sshguard

2012-07-25 Thread Chris Lobkowicz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 sshguard prefers to use the log-sucker way of parsing authlog. I don't even have a mention of sshguard in syslog.conf. the rc script just basically daemonises sshguard, and points it at /var/log/authlog # /etc/rc.d/sshguard

Re: sshguard

2012-07-25 Thread Alvaro Mantilla Gimenez
Is it a better solution than pf rules based on max-src-conn and/or max-src-conn-rate? According to the documentation sshguard add ip address to sshguard tablesowhat about if I want to selectively block ip address to some services and let other services open? (i.e.: one ip offending ssh

Re: sshguard

2012-07-25 Thread obsd
-Ursprungligt meddelande- Från: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] För Otto Moerbeek Skickat: den 25 juli 2012 16:05 Till: Hasse Hansson Kopia: misc@openbsd.org Ämne: Re: sshguard On Wed, Jul 25, 2012 at 02:25:44PM +0200, Hasse Hansson wrote: Hello all. # uname -a

Re: sshguard

2012-07-25 Thread obsd
-Ursprungligt meddelande- Från: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] För Otto Moerbeek Skickat: den 25 juli 2012 16:05 Till: Hasse Hansson Kopia: misc@openbsd.org Ämne: Re: sshguard On Wed, Jul 25, 2012 at 02:25:44PM +0200, Hasse Hansson wrote: Hello all. # uname -a

vmware guest clock skew

2012-07-25 Thread Ted Unangst
I have an OpenBSD guest running in vmware player on my laptop. My problem is that when I suspend the laptop, the clock in vmware doesn't keep ticking, and before I know it, openbsd thinks it's last Monday. I see vmt provides a timedelta sensor, but I don't think ntp is up to the task of jamming

Re: amd unmounting

2012-07-25 Thread Sunil Nimmagadda
On Sat, Jun 02, 2012 at 12:37:44PM +0100, Stuart Henderson wrote: Can anyone help with a little amd problem? I have some partitions on SSD and some on HD and would like to use amd(8) so that the HD filesystems are only mounted on-demand, reducing fsck time in a crash. I've got them

Re: vmware guest clock skew

2012-07-25 Thread Matthew Dempsky
In vmt_tick() we could notice anytime the reported sensor value jumps significantly and then wind forward the clocks like we do when recovering from ACPI sleep. On Wed, Jul 25, 2012 at 10:52 AM, Ted Unangst t...@tedunangst.com wrote: I have an OpenBSD guest running in vmware player on my laptop.

Re: vmware guest clock skew

2012-07-25 Thread Ted Unangst
On Wed, Jul 25, 2012 at 11:14, Matthew Dempsky wrote: In vmt_tick() we could notice anytime the reported sensor value jumps significantly and then wind forward the clocks like we do when recovering from ACPI sleep. Yes, I was thinking something like that. vmt should maybe provide a real

Re: vmware guest clock skew

2012-07-25 Thread Ted Unangst
On Wed, Jul 25, 2012 at 11:14, Matthew Dempsky wrote: In vmt_tick() we could notice anytime the reported sensor value jumps significantly and then wind forward the clocks like we do when recovering from ACPI sleep. I like this, and I think it even works. Scary warnings about no locking in

disk_map in subr_disk.c

2012-07-25 Thread Frank Brodbeck
Hi, currently I am trying (just out of curiosity) to find a way to resolve a duid to a device name. For that matter I believe that looking at disk_map() in subr_disk.c is the right place. As I am a complete C beginner I have a hard time to understand a particular block of code so I decided to

Re: vmware guest clock skew

2012-07-25 Thread Matthew Dempsky
On Wed, Jul 25, 2012 at 1:25 PM, Ted Unangst t...@tedunangst.com wrote: tc_setclock - doesn't seem to do much itself. What are the consquences of timehands-th_offset getting raced? Racing calls to {micro,nano,bin}time() can get bogus times (e.g., interrupts or even other userspace threads that

Re: disk_map in subr_disk.c

2012-07-25 Thread Otto Moerbeek
On Wed, Jul 25, 2012 at 09:34:02PM +0200, Frank Brodbeck wrote: Hi, currently I am trying (just out of curiosity) to find a way to resolve a duid to a device name. For that matter I believe that looking at disk_map() in subr_disk.c is the right place. As I am a complete C beginner I have

Re: disk_map in subr_disk.c

2012-07-25 Thread Frank Brodbeck
On Wed, Jul 25, 2012 at 10:51:56PM +0200, Otto Moerbeek wrote: Userland prorams do not share memory or symbols with the kernel at all that is a fundamental thing in Unix. Your code just references a bunch of uninitialized vars. Chekc opendev(3) (source in src/lib/libutil/opendev.c) which is

Re: sshguard

2012-07-25 Thread Chris Lobkowicz
I use both. Sshguard seems to catch a lot, and the subsequent pf ruleset for max-src-conn seems to catch a fair bit as well. Here is a snip of my pf.conf: # SSHguard protection table sshguard persist block in quick on em0 proto tcp from sshguard to any port ssh label sshguard # Bruteforce

Re: sshguard

2012-07-25 Thread obsd
-Ursprungligt meddelande- Från: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] För Chris Lobkowicz Skickat: den 26 juli 2012 01:26 Till: misc@openbsd.org Ämne: Re: sshguard I use both. Sshguard seems to catch a lot, and the subsequent pf ruleset for max-src-conn seems to catch a

Re: Any recommendation for WAN optimization?

2012-07-25 Thread Girish Venkatachalam
bump On Tue, Jul 24, 2012 at 10:10 PM, Girish Venkatachalam girishvenkatacha...@gmail.com wrote: Particularly for MS SQL kind of stuff? Do we have anything interesting in ports? Using ssh with -C flag? -Girish -- Gayatri Hitech http://gayatri-hitech.com -- Gayatri Hitech

Re: Any recommendation for WAN optimization?

2012-07-25 Thread David Diggles
You need to ask a better quality question? It is not clear what you mean, or what you are trying to do. On Thu, Jul 26, 2012 at 08:48:42AM +0530, Girish Venkatachalam wrote: bump On Tue, Jul 24, 2012 at 10:10 PM, Girish Venkatachalam girishvenkatacha...@gmail.com wrote: Particularly for

Re: sshguard

2012-07-25 Thread David Diggles
How secure is the principle of log sucking for anything more than stats? The inherent assumptions are risky I would think. I mean, if someone could deliberately craft certain strings with spaces or tabs that get passed, then they could subvert the sucking script. There is an absolute reliance on

Re: magic code in /src/sys/net/if_spppsubr.c

2012-07-25 Thread Philip Guenther
On Tue, Jul 24, 2012 at 5:02 PM, f5b f...@163.com wrote: /src/sys/net/if_spppsubr.c rev=1.98 1. line 3557 p opt[i++] = 0; /* TBD */ Yep, the author's finger slipped...and it doesn't matter because it's in a non-functional ifdef'ed out block. A diff to actually add support

Calomel.org

2012-07-25 Thread Shaka NKofo
I'm new to Open BSD but no stranger to *nix OSs. My question here is simple. I have been reading the man pages and documentation and have installed and setup a 5.1 box on my lan. Now after understanding its basic inner workings I wish to put it to heavy and good use. All I'm asking is that is it

Re: Calomel.org

2012-07-25 Thread David Diggles
Apparently calomel is full of bad and/or outdated advice for openbsd, especially the sysctl tuning stuff. Your best advice is to follow the official FAQ's on openbsd.org, and read openbsd man pages to learn your techniques. Maybe there needs to be a calomel faq on openbsd.org. On Thu, Jul 26,

Re: Calomel.org

2012-07-25 Thread Bernd
On 07/26/2012 06:55 AM, thus Shaka NKofo spake: I'm new to Open BSD but no stranger to *nix OSs. My question here is simple. I have been reading the man pages and documentation and have installed and setup a 5.1 box on my lan. Now after understanding its basic inner workings I wish to put it to

Re: Calomel.org

2012-07-25 Thread Joakim Dellrud
Okay I feel that a flame war might be afoot but to put another log on the fire; is Calomel not trustworthy in the read and do alike not copying straight from kind of way? I have used the guides for instance about the PF and DNS. And that server has now been working fine for ages (2 years ;)).