Re: OT - gmail alternatives

2010-12-09 Thread Brad Tilley
Adam M. Dutko wrote: How do they deal with legal jurisdiction? Technically the government can still subpoena and they'd have to turn over the documents in the persons account, including backups. Use GPG so all the ISP could do is hand over the encrypted bits. You hold the key. Brad

OT - Switzerland domain name registrars

2010-12-08 Thread Brad Tilley
Can anyone recommend good/reputable domain name registrars in Switzerland to buy .ch domains from and/or transfer .com names to? I'm in the US and have heard good things about switchplus, but I wanted to ask here as I know many OpenBSD people are in Europe. Thanks, Brad

Re: SSD with firmware upgrade under OpenBSD

2010-11-30 Thread Brad Tilley
Kevin Chadwick wrote: On Tue, 30 Nov 2010 16:44:51 +0100 Jan Stary h...@stare.cz wrote: On Nov 30 12:32:16, Kevin Chadwick wrote: On Mon, 29 Nov 2010 21:17:17 -0500 Brad Tilley b...@16systems.com wrote: Do they really fail that often? My current understanding is that a mostly empty SSDS

Re: SSD with firmware upgrade under OpenBSD

2010-11-30 Thread Brad Tilley
Kevin Chadwick wrote: I almost completely agree, but also disagree and yes I'd say it's not worth getting into again. I would have to check the latest developments as I can imagine an algorithm which solved the problem during idle periods or didn't use it's full capacity but currently I don't

Re: SSD with firmware upgrade under OpenBSD

2010-11-29 Thread Brad Tilley
On 11/29/2010 02:56 PM, Ted Unangst wrote: buying a new SSD to replace your burned out one every year is still cheaper than building a 15k sas drive raid set with equivalent performance. I've been using an inexpensive Kingston SSD for more than a year now in a 4.6 box. It works fine and I've

Re: Advice on learning C as first language

2010-11-24 Thread Brad Tilley
James Hozier wrote: Are there any books that are more noob-friendly that want to learn C as their first language and explain basic programming terms along the way? I'm no expert, but I do program C for applications (not operating systems). My advice would be to study data structures, pointers

Re: Advice on learning C as first language

2010-11-24 Thread Brad Tilley
Brad Tilley wrote: James Hozier wrote: Are there any books that are more noob-friendly that want to learn C as their first language and explain basic programming terms along the way? Forgot to mention a book... If you decide to take the C++ route, I suggest Accelerated C++. http

Re: OT: Disadvantages of using virtual firewalls like OpenBSd

2010-11-23 Thread Brad Tilley
carlopmart wrote: Advantages are very clear for me: provisioning, administration tasks, etc ... But I will to know disadvantages. What is your opinion from the point of view of security? I use virtualization for many things (mainly for the productivity advantages that you list), but it has

Re: OT: Disadvantages of using virtual firewalls like OpenBSd

2010-11-23 Thread Brad Tilley
Nick Holland wrote: what's changed? Layering? Nope. Crappy programming? Nope. Better hardware? not really. Features-before-security? Nope. Good points. The goals of virtualization are, easy management, power savings, quick provisioning and deployment, redundancy, etc. When you talk about

Re: OT IPv6 Was: nfsv4?

2010-10-31 Thread Brad Tilley
On 10/31/2010 04:01 PM, Diana Eichert wrote: excuses only go for so long. I tell you IPv6 deployment is moving forward. Perhaps we can shame them into facing facts: $ dig +short www.netbsd.org 2001:4f8:3:7:2e0:81ff:fe52:9a6b $ dig +short www.freebsd.org 2001:4f8:fff6::21 $ dig

Re: OT IPv6 Was: nfsv4?

2010-10-30 Thread Brad Tilley
On 10/30/2010 04:18 PM, Marco Peereboom wrote: Lets hope the youtubes and facebooks go v6 so that they get of my v4 lawn. No need to hope: $ dig +short www.v6.facebook.com 2620:0:1cfe:face:b00c::3 Brad

Re: nfsv4?

2010-10-29 Thread Brad Tilley
James A. Peltier wrote: No, the NFS share is re-exported out via Samba as a native CIFS mount to Windows machines. It's a simple copy paste for them CIFS? How do you encrypt that? That's all clear text (except the auth) right? Brad

Re: nfsv4?

2010-10-29 Thread Brad Tilley
On 10/29/2010 09:24 PM, Corey wrote: I've put off learning anything really about IPv6 in hopes that after most organizations ignore it, it withers and dies (at least in its current form). snip I like it. It works well with OpenBSD and you can get free tunnels from Sixxs and others to use

Re: nfsv4?

2010-10-27 Thread Brad Tilley
James A. Peltier wrote: Now, that said, is there anything that you could recommend instead of NFSv4 for offering secure file services to multiple platforms? Apache with SSL may be a solution. I've used it on small scale projects. You can auth users against LDAP, AD, etc. Should work with any

Re: Force passwordcheck in login.conf

2010-10-18 Thread Brad Tilley
One last note... it seems that OpenPAM on the other BSDs and LinuxPAM on Linux systems address all of PCI requirement 8. However, they all seem to differ slightly with their PAM implementations and PAM in general seems overly complex (to me at least). I mis-configured PAM on a test system

Re: Force passwordcheck in login.conf

2010-10-17 Thread Brad Tilley
On 10/17/2010 12:56 PM, Dewey Hylton wrote: just a quick note on how we addressed 8.5.13 ... yes, it requires python, but we are a python shop so this was not an issue for us. i'm just posting it for the purpose of sharing ideas. http://www.deweyonline.com/files/openbsd/login_-custompasswd

Re: Auto Logout Idle Users

2010-10-15 Thread Brad Tilley
Jurjen Oskam wrote: On Thu, Oct 14, 2010 at 06:17:23PM -0400, Brad Tilley wrote: I thought about doing that too. I need to test it more to see what happens when ksh is the shell and the user executes csh manually. I suppose ksh will still honor TMOUT in that case. TMOUT is at most

Re: Force passwordcheck in login.conf

2010-10-14 Thread Brad Tilley
Leif Blixt wrote: Brad Tilley brad at 16systems.com writes: I was experimenting with a program to meet PCI DSS 1.2 password length and content/complexity requirements and integrating it with login.conf for users who have shell access to OpenBSD systems. It seems to work as expected, but I

Re: Force passwordcheck in login.conf

2010-10-14 Thread Brad Tilley
Leif Blixt wrote: Hi! We have just figured out a different approach, and will discuss our new idea with our QSA tomorrow. The idea is to completely turn of the possibility to log in with passwords, and to use SSH key pairs with long and good passphrases instead. It will lead to more work

Re: Force passwordcheck in login.conf

2010-10-14 Thread Brad Tilley
what your QSA determines. It seems some of this is open to interpretation and depends on the opinion of the QSA. Brad -Original Message- From: Brad Tilley [mailto:b...@16systems.com] Sent: den 14 oktober 2010 14:09 To: Leif Blixt; openbsd-misc Subject: Re: Force passwordcheck

Re: FW: Force passwordcheck in login.conf

2010-10-14 Thread Brad Tilley
Stuart VanZee wrote: For 8.5.12 see login.conf man page, look for passwordcheck. You will have to write (or find) a program that keeps track of previously used passwords. I just stored a hash of them in a file and have it check to see if the new password hash matches any of the old 4

Re: Auto Logout Idle Users

2010-10-14 Thread Brad Tilley
Brad Tilley wrote: I created the file /etc/profile to force sh and ksh to logout users after a certain period of idleness: $ cat /etc/profile # Force sh and ksh to logout idle users after 15 minutes # Prevent normal users from disabling this setting readonly TMOUT=900 export TMOUT

Re: Auto Logout Idle Users

2010-10-14 Thread Brad Tilley
Adam M. Dutko wrote: Any good reason to not do this? They're not the same shell. Yes, I know that part :) I can't think of any security reasons because I'm not familiar with the code but as far as logs and noise factor I imagine it would go up or various things might start breaking that

Re: Auto Logout Idle Users

2010-10-14 Thread Brad Tilley
Jan Stary wrote: Why do you want to logout idle users? There is sysutils/idled if you need it. I'm experimenting with getting an OpenBSD base system to meet the PCI DSS requirements. I'm trying to avoid using any software outside the base system. rm /bin/csh cp /bin/ksh /bin/csh You just

Re: Auto Logout Idle Users

2010-10-14 Thread Brad Tilley
On 10/14/2010 05:08 PM, Darrin Chandler wrote: rm /bin/csh cp /bin/ksh /bin/csh You just forced your csh users to use ksh. Why do you want them to hate you? It's just a shell, they'll get over it. Remove it from /etc/shells instead. Replacing csh with ksh is evil, and I don't mean that

Re: Auto Logout Idle Users

2010-10-14 Thread Brad Tilley
On 10/14/2010 05:13 PM, Jan Stary wrote: On Oct 14 17:01:30, Brad Tilley wrote: Jan Stary wrote: Why do you want to logout idle users? There is sysutils/idled if you need it. I'm experimenting with getting an OpenBSD base system to meet the PCI DSS requirements. Does PCI DSS require you

Re: Auto Logout Idle Users

2010-10-14 Thread Brad Tilley
On 10/14/2010 06:45 PM, Ben Niccum wrote: I thought about doing that too. I need to test it more to see what happens when ksh is the shell and the user executes csh manually. I suppose ksh will still honor TMOUT in that case. Brad Don't mean to complicate things for you, but just thought

Re: Force passwordcheck in login.conf

2010-10-13 Thread Brad Tilley
Mark Romer wrote: use passwdqc it is in packages. in login.conf under default I have: :minpasswordlen=12:\ :login-tries=4:\ :passwordtries=3:\ :passwordcheck=/usr/local/libexec/passwdqc -3 12 Mark I've heard complaints that it is too stringent (I tend to agree,

Auto Logout Idle Users

2010-10-13 Thread Brad Tilley
I created the file /etc/profile to force sh and ksh to logout users after a certain period of idleness: $ cat /etc/profile # Force sh and ksh to logout idle users after 15 minutes # Prevent normal users from disabling this setting readonly TMOUT=900 export TMOUT That works great. I've tried to

Force passwordcheck in login.conf

2010-10-12 Thread Brad Tilley
I was experimenting with a program to meet PCI DSS 1.2 password length and content/complexity requirements and integrating it with login.conf for users who have shell access to OpenBSD systems. It seems to work as expected, but I wanted to run my configuration by misc. I appended the following

Re: insecure scheduler in OpenBSD 4.7

2010-10-11 Thread Brad Tilley
On 10/11/2010 04:59 PM, Martin Schrvder wrote: 2010/10/11 Dmitry-T dmitr...@yandex.ru: How you use the OpenBSD as web servers and hosting platform? RTFAQ Permanently catch and kill processes? man ulimit What do you see when you man ulimit? Best Martin

Re: Wireless Network GUI

2010-10-07 Thread Brad Tilley
Guillaume DualC) wrote: On Thu, 7 Oct 2010 09:33:44 -0300, Christiano F. Haesbaert haesba...@haesbaert.org wrote: Why not make a curses GUI ? I find it much more useful than gtk/qt (IMHO). In my opinion, the aim of this project is to provide a graphical tool, which can be inserted in some

Re: Netbook for OpenBSD?

2010-10-06 Thread Brad Tilley
On 10/06/2010 09:54 PM, Mikle Krutov wrote: Hello, list! I'm a FreeBSD user (a very little experience with openbsd in the past), but i'm kind of interested in any bsd flavour (i like *nix, but dislike linux for some reasons). So, the question is if there is any positive experience with

Re: Router components

2010-10-04 Thread Brad Tilley
David Higgs wrote: big snips I know SSDs don't require TRIM, but most benchmarks are made by knob-twiddlers that are presumably overemphasizing the performance degradation you get without it. Is this even noticeable in practice? I've used an inexpensive SSD (cheapest one I could find at the

Re: How to use /dev/srandom

2010-10-04 Thread Brad Tilley
Janne Johansson wrote: What I meant was that one can complain of that the NIST programs (diehard and dieharder springs to mind) only do certain tests, but that is just because noone can make a short program that _proves_ a certain stream is random. The only thing available seems to be a

Re: How to use /dev/srandom

2010-10-04 Thread Brad Tilley
Janne Johansson wrote: List of the CURRENT fully implemented tests (as of the 08/18/08 snapshot): #=# # dieharder version 3.29.4beta Copyright 2003 Robert G. Brown #

Re: Linux or OpenBSD

2010-09-27 Thread Brad Tilley
Martin Schrvder wrote: 2010/9/27 Brad Tilley b...@16systems.com: How many privilege escalation attacks (normal user getting a root shell) has OpenBSD had during the last five years? There have been several of The absence of reports doesn't prove that the flaws don't exist (and no, I'm

Re: Linux or OpenBSD

2010-09-26 Thread Brad Tilley
On 09/26/2010 04:54 PM, Kevin Chadwick wrote: It's occured to me that I think what Theo suggested was actually about using more than one architecture, which may be a better method over Linux. How many privilege escalation attacks (normal user getting a root shell) has OpenBSD had during the

Re: Linux or OpenBSD

2010-09-22 Thread Brad Tilley
Rikky Taylor wrote: I was after some general advice. I need to setup a routing firewall with 3 interfaces, moderate traffic and a fair amount of NAT'ing in the rules. Given identical modern server hardware would I expect a performance difference between an OpenBSD/PF setup and a

Re: pf and !

2010-06-10 Thread Brad Tilley
Peter Fraser wrote: man pf.conf never describes what ! does. The ! is used in some examples and a lot of the time is obvious what will happens. The pf faq has somewhat more of an explanation of ! with multiple address, but its explanation only refers to the use of ! in tables. There is

Re: Processeur Atom

2010-06-10 Thread Brad Tilley
E.T wrote: Hi In this text, I have a athlon1 available. But it takes a lot of room, very hot, a lot of noise, and consumes much electricity. I try to disconnect the fan to see, but the CPU temperature was up to 105 B0 C in 5 minutes. Otherwise, OpenBSD operating nickel above, I installed

Re: Processeur Atom

2010-06-10 Thread Brad Tilley
E.T wrote: very, very small processor. N270 best performance? . Firewall or desktop ? OpenBSD 4.6-current (RAMDISK_CD) #149: Mon Sep 14 04:31:59 MDT 2009 t...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/RAMDISK_CD cpu0: Intel(R) Atom(TM) CPU N270 @ 1.60GHz (GenuineIntel 686-class)

Re: Processeur Atom ?

2010-06-10 Thread Brad Tilley
FRLinux wrote: On Thu, Jun 10, 2010 at 7:32 PM, Joachim Schipper joac...@joachimschipper.nl wrote: I would like to make a firewall / router running OpenBSD. Okay, but what is your question? I guess he is asking if all Atom processors are compatible with OpenBSD, which i guess is pretty

Re: It is 2010. Still no 3GB support by default?

2010-06-07 Thread Brad Tilley
Dexter Tomisson wrote: I'd really, really like to know what's the matter with a larger memory support? Why is 'bigmem' still not default? What faults/bugs does it still has? What do you need to make it ok? Do you need a hardware donation to make that better, do you need few bucks, do you

Re: Installer bug? - Upgrade 4.6 to 4.7 failed to upgrade base47, on i386 and amd64

2010-06-05 Thread Brad Tilley
Theo de Raadt wrote: If [you] don't know what you are doing, install a new snapshot. We do this frequently. Works very well. bsd.rd makes it easy to move to a new snapshot. We buy -release CDs too, but seldom open them. Brad

Re: GNU/Linux user wanting to make the switch to OpenBSD for ADSL2+ Router.

2010-05-27 Thread Brad Tilley
Jon Scruggs wrote: How reliable is the Wireless N with that chipset here? To my knowledge, there is no 802.11N support in OpenBSD. Read the last paragraph: http://www.openbsd.org/cgi-bin/man.cgi?query=athnsektion=4apropos=0manpath=OpenBSD+Currentarch=i386 Brad

Re: Help contacting Richard Stallman

2010-05-26 Thread Brad Tilley
Julian Acosta wrote: Really we need to contact with Richard Stallman, just for give us his opinion and answer us some questions about free software, How can I contact him? What's his real email? Just talk a lot about open source and the Linux operating system. He'll show up.

Re: Consideration before installling on SSD hard drive

2010-05-22 Thread Brad Tilley
On 5/22/2010 12:21 PM, Marco Peereboom wrote: Yeah; ignore dos and donts the ssd, if of any quality, will do fine. That has been my experience with SSDs on OpenBSD and Linux. I've been using an inexpensive Kingston SSD for about six months now, it works great. Here is an older dmesg from it:

Re: State of multiprocessing and multithreading in OpenBSD

2010-05-05 Thread Brad Tilley
Tony Abernethy wrote: Peter N. M. Hansteen wrote: pe...@bsdly.net (Peter N. M. Hansteen) writes: I would think that would be a fair question to ask the person who told you PF is garbage because it is multithreaded: eh, because it is *not* multithreaded: Now watch when application

Re: openbsd not blob free?

2010-05-05 Thread Brad Tilley
Kent Watsen wrote: There is a discussion on the osol-discuss mailing list this morning where it's pointed out that OpenBSD source tree has a blob in it: http://osdir.com/ml/opensolaris-discuss/2010-05/msg00095.html The location of the blob in the tree is here:

Re: confused about updating -current

2010-04-28 Thread Brad Tilley
On Wed, 28 Apr 2010 08:37 -0500, Ahlsen-Girard, Edward F CTR USAF AFSOC AFSOC/A6OK edward.ahlsen-girard@hurlburt.af.mil wrote: On 2010-04-27 23:01:30 Alastair Johnson wrote: if i install a system from install47.iso taken from the snapshots folder on a mirror i end up with a -current

Re: confused about updating -current

2010-04-28 Thread Brad Tilley
On Wed, 28 Apr 2010 08:08 -0600, Ted Roby ted.r...@gmail.com wrote: On Wed, Apr 28, 2010 at 7:53 AM, Brad Tilley b...@16systems.com wrote: Nor am I, but I do that often with base installs and have not had any major issues. There would be security concerns (especially with ports

Re: confused about updating -current

2010-04-28 Thread Brad Tilley
On Wed, 28 Apr 2010 17:05 -0500, Chris Bennett ch...@bennettconstruction.biz wrote: A while back on some thread, someone said that they ran -current versions for a long while, updating ports tree for that snapshot and could run with that particular -current as long as they liked by adding

Re: scp speed ffs/fat

2010-04-28 Thread Brad Tilley
On Thu, 29 Apr 2010 07:09 +0800, shweg...@gmail.com wrote: Transfering a file using scp into my home directory gives me this speed (home netword): 658.8KB/s while copying it directly into a usb stick (fat32) gives me this: 1.5MB/s is it normal? scp is encrypted and traveling across your

Re: reporting a bug in ports/net/flow-tools?

2010-04-27 Thread Brad Tilley
On Tue, 27 Apr 2010 17:41 +0300, Stas Miasnikou m...@gurtam.com wrote: Michael W. Lucas: Sendbug doesn't seem to have a ports option, and my bug report doesn't have a single recommend solution in any case, so I'm asking here. The flow-log2rrd, flow-rpt2rrd, and flow-rptfmt programs in

Re: confused about updating -current

2010-04-27 Thread Brad Tilley
On Wed, 28 Apr 2010 00:01 +0100, Alastair Johnson att...@googlemail.com wrote: if i install a system from install47.iso taken from the snapshots folder on a mirror i end up with a -current system eg: OpenBSD 4.7-current (GENERIC) #636: the docs state that you cant go from -current to

Re: Is this a case of paranoia?

2010-04-25 Thread Brad Tilley
On Sun, 25 Apr 2010 17:48 +0200, Danny dannydeb...@gmail.com wrote: Shane, What I have found with our company's installation of Webmarshall is that you can , for example, go to linux.box.sk and surf around for about 5 mins, then all of a sudden it gets blocked. 95% of what these devices

Re: Multibooting (was : OpenBSD culture)

2010-04-19 Thread Brad Tilley
On Mon, 19 Apr 2010 11:07 +0100, Peter Kay (Syllopsium) syllops...@syllopsium.com wrote: OpenBSD does not require a primary partition, nor does NetBSD. Solaris does for the moment, although code to fix that has been committed. I have a Windows 7 x64, OpenBSD, Solaris, NetBSD multiboot.

Re: OpenBSD culture?

2010-04-15 Thread Brad Tilley
On Sat, 17 Apr 2010 05:20 -0300, VICTOR TARABOLA CORTIANO vt...@c3sl.ufpr.br wrote: Saying that ISC is more free than GPL makes no sense Saying Do not remove our text does not restrict your freedom. That's all the ISC asks of you. Leave the copyright notice and the permission to use alone.

Re: OpenBSD culture?

2010-04-14 Thread Brad Tilley
On Wed, 14 Apr 2010 07:17 -0400, Steve Shockley steve.shock...@shockley.net wrote: On 4/14/2010 5:11 AM, Zachary Uram wrote: smacks of superiority and even condescension at times. Is this a fair I don't think they're superior and condescending... I think they're superior and busy.

Re: Trying to boot OpenBSD on Juniper Networks J2320.

2010-04-13 Thread Brad Tilley
On Tue, 13 Apr 2010 19:29 -0400, bofh goodb...@gmail.com wrote: Now I'm curious - in what way would a decent juniper hardware be better than some off the shelf stuff? MTBF is greater. If you don't care about that, there's probably not much difference... unless you need routers in space. Not

Re: Soekris net5501 locks up with Ralink 2860 miniPCI

2010-04-07 Thread Brad Tilley
On Wed, 07 Apr 2010 07:18 -0600, Daniel Melameth dan...@melameth.com wrote: On Wed, Apr 7, 2010 at 7:04 AM, Stuart Henderson s...@spacehopper.org wrote: The newest ones that I've had personal experience of being problem- free in AP mode are the old PRISM cards (when running suitable firmware

Re: feature request: fallback boot image

2010-04-02 Thread Brad Tilley
On Fri, 02 Apr 2010 17:08 +0200, Paul de Weerd we...@weirdnet.nl wrote: Your timeout idea is interesting. The bootloader loads the kernel image and then starts executing it. After this, the bootloader is no longer active, who will do this timing out ? The kernel (or the garbage that was

Re: Anomali on /var available space

2010-03-27 Thread Brad Tilley
On Sat, 27 Mar 2010 13:09 +0100, Peter N. M. Hansteen pe...@bsdly.net wrote: Kabayan kab4...@yahoo.com writes: Problem solve after I restart pflogd New problem is Why the pflogd process almost use 100% capacity of my /var ? My guess would be that your pf.conf logs traffic with log (all)

Re: gnu grep -o flag

2010-03-24 Thread Brad Tilley
No. i...@iso2:~/Desktop$ grep import IDS_targets.py import MySQLdb import socket import getpass import datetime i...@iso2:~/Desktop$ grep import -o IDS_targets.py import import import import On Wed, 24 Mar 2010 13:33 -0500, Marco Peereboom sl...@peereboom.us wrote: huh? didn't you just

Re: 4.6 patch support

2010-03-22 Thread Brad Tilley
On Mon, 22 Mar 2010 14:45 +0100, Marc Espie es...@nerim.net wrote: On Mon, Mar 22, 2010 at 08:11:53AM -0400, Woodchuck wrote: Ports/packages are sort of hit-or-miss. This is a very Spartan situation, and comes from a shortage of resources. Partly. Being able to drop old shit fairly

Re: recent hardware with older OpenBSD versions

2010-03-21 Thread Brad Tilley
On Sun, 21 Mar 2010 11:36 +0100, T. Valent tmp...@4ss.de wrote: In the end it seems like I have to give up the idea of keeping all installations on the same level, it seems like I have create a complete new platform (new motherboard type and new OpenBSD version) for all new customers, just

Re: script to update dyndns IP

2010-03-19 Thread Brad Tilley
On Fri, 19 Mar 2010 00:20 -0700, Aaron Stellman z...@x96.org wrote: On Thu, Mar 18, 2010 at 09:52:28PM -0400, Brad Tilley wrote: There are ports that do this with more features, but I thought others might like to do it in base with no added software. I've been using this script since 4.2

script to update dyndns IP

2010-03-18 Thread Brad Tilley
There are ports that do this with more features, but I thought others might like to do it in base with no added software. I've been using this script since 4.2 and it works OK: #!/bin/ksh # Cron this script to run every X minutes. Written for OpenBSD. # Get Current IP lynx -dump

Re: script to update dyndns IP

2010-03-18 Thread Brad Tilley
On Thu, 18 Mar 2010 21:52 -0400, Brad Tilley b...@16systems.com wrote: There are ports that do this with more features, but I thought others might like to do it in base with no added software. I've been using this script since 4.2 and it works OK: #!/bin/ksh # Cron this script to run

Re: kde4 dead?

2010-03-15 Thread Brad Tilley
On Mon, 15 Mar 2010 15:27 +0100, Antoine Jacoutot ajacou...@bsdfrog.org wrote: On Mon, 15 Mar 2010, Tobias Ulmer wrote: On Mon, Mar 15, 2010 at 04:33:03AM -0500, Donald Cooley wrote: openports shows that the openbsd version of kde4 is nearly two years old. are there any future plans to

Re: kde4 dead?

2010-03-15 Thread Brad Tilley
On Mon, 15 Mar 2010 10:56 -0400, Brad Tilley b...@16systems.com wrote: On Mon, 15 Mar 2010 15:27 +0100, Antoine Jacoutot ajacou...@bsdfrog.org wrote: On Mon, 15 Mar 2010, Tobias Ulmer wrote: On Mon, Mar 15, 2010 at 04:33:03AM -0500, Donald Cooley wrote: openports shows

Re: A small research paper - Thoughts about Cisco.

2010-03-11 Thread Brad Tilley
On Thu, 11 Mar 2010 15:43 +, TS Lura tsl...@gmail.com wrote: I'm sorry. My intent was not to be inflammatory. My experience with Cisco as a company is limited, so I'm therefor trying to find out more. In that process I maybe asking a controversial question. Which for some is quite

Intel Gigabit ET NIC Quad Port

2010-03-10 Thread Brad Tilley
We're considering this card for an OpenBSD Snort box. I think em supports it well. It uses the 82576EB controller. Has anyone used the card much? If so, are you satisfied with it? http://ark.intel.com/Product.aspx?id=36796 Thanks, Brad

Re: OT: multiple web servers on OpenBSD (WAS: OT: vmware blah blah)

2010-03-08 Thread Brad Tilley
On Mon, 08 Mar 2010 10:18 -0700, Ted Roby ted.r...@gmail.com wrote: I can think of one good reason I need a vm machine: So I can put OpenBSD on the Xserves, and run OSX in the vm for mac-only apps the client requires. Another good reason: Reverting compromised Windows machines back to a

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread Brad Tilley
On Thu, 04 Mar 2010 11:44 -0500, nixlists nixmli...@gmail.com wrote: On Thu, Mar 4, 2010 at 11:35 AM, Chris Bennett ch...@bennettconstruction.biz wrote: You are talking about two separate issues. Stability is not related to security directly. The two are intricately combined but not the

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread Brad Tilley
On Thu, 04 Mar 2010 15:12 -0500, nixlists nixmli...@gmail.com wrote: It seems the opinion on running current in production ranges from being overly optimistic to being very cautious. If running -current in production is only recommended for people who are intimately familiar with the

Re: -current or -stable [was: Not another Browser Question]

2010-03-03 Thread Brad Tilley
On Wed, 03 Mar 2010 09:02 -0500, Scott McEachern sc...@erratic.ca wrote: Manuel Giraud wrote: I wasn't clear enough: by new package, I meant a package not installed on my system yet and not the bleeding edge version of one package. Ah ok, sorry, I misunderstood. Maybe I'll stick

Re: fsck UNEXPECTED INCONSISTENCY

2010-03-02 Thread Brad Tilley
On Tue, 02 Mar 2010 07:50 -0800, J.C. Roberts list-...@designtools.org wrote: And I thought I was expected to be inconsistent. ;) Anyhow, I was upgrading from the Feb 2, to the most recent snapshot, and fsck is coming up with a problem on one of my partitions. I can probably get it working

Re: Advice requested on modem WiFi for old notebook

2010-03-01 Thread Brad Tilley
On Mon, 01 Mar 2010 20:41 -0500, Dave Anderson d...@daveanderson.com wrote: I've inherited an old notebook (Sony Vaio PCG-FX120) and installed 4.6-release on it; while I haven't yet done extensive testing, most things (except the LoseModem, of course) seem to work (full dmesg below, and sent

OT: Cloud Computing Security

2010-02-25 Thread Brad Tilley
Is it too early for Friday humor? If not, here are some clowns worth watching: http://www.youtube.com/watch?v=VjfaCoA2sQk

Re: OpenBSD insecure OS?

2010-02-24 Thread Brad Tilley
On Wed, 24 Feb 2010 19:36 +, carlos albino garcia grijalba genesi...@hotmail.com wrote: Folks i dont mean obsd is insecure i love obsd, ive been using it for 5 years i just want the community to read the history sorry. OpenBSD doesn't have the rubber stamps. That's what confuses people.

Re: OpenBSD Volunteer needed today in Los Angeles - Solved!

2010-02-21 Thread Brad Tilley
On Sun, 21 Feb 2010 15:35 -0800, Michael Dexter dex...@bsdfund.org wrote: Thank you Seth and Brooke for materializing and putting on a great OpenBSD booth at SCaLE in Los Angeles. Overheard question of the day: Could you please get EAL level 4 certification so I can use you in the US Air

Re: OT: opinions on IDS / IPS solutions

2010-02-18 Thread Brad Tilley
On Wed, 17 Feb 2010 22:59 -0500, Jason Beaudoin jasonbeaud...@gmail.com wrote: Hi There, As I often have greater respect for a much larger portion of this list than the rest of the internet, I am curious what is thought about current IDS/IPS hardware from vendors like Trustwave, Checkpoint,

Re: Security feed

2010-02-17 Thread Brad Tilley
On Wed, 17 Feb 2010 20:05 +0100, Jean-Francois jfsimon1...@gmail.com wrote: Hello All, I am a little bit out of subject but please allow me to ask you about feeds of security issues. Thank you I read this page and the links off of it: http://www.openbsd.org/errata.html

Re: routing and pf at 10Gbps

2010-02-12 Thread Brad Tilley
On Fri, 12 Feb 2010 14:59 +0100, Bret Lambert bret.lamb...@gmail.com wrote: On Fri, Feb 12, 2010 at 2:52 PM, Diana Eichert deich...@wrench.com wrote: On Thu, 11 Feb 2010, Claudio Jeker wrote: Henning, I told you, we should not talk about unfinsihed projects. We planned to announce this

Re: Read_Write buffers for dd WAS: little cp diff

2010-02-08 Thread Brad Tilley
On Mon, 08 Feb 2010 09:06 -0500, Sean Kennedy woodentu...@hotmail.com wrote: Moving this to m...@... Would part of this discussion usefully related to such issues like using 'dd' for diskwipes/copies/reformatting and slow data movement speeds? There are times when I am wiping (for reuse)

Re: Is OpenBSD + PF accredited or certified in any way ?

2010-02-02 Thread Brad Tilley
On Tue, 02 Feb 2010 18:09 +, Bayard Bell buffer.g.overf...@googlemail.com wrote: Formal evaluation just means that the features judged relevant to the evaluation can be minimally verified. On the flip side, there's David Litchfield's observation in the introduction to The Oracle

Re: PowerEdge 850 for a small office firewall

2010-01-27 Thread Brad Tilley
On Wed, 27 Jan 2010 07:54 -0500, Chris Dukes pak...@pr.neotoma.org wrote: On Tue, Jan 26, 2010 at 04:38:08PM -0800, mehma sarja wrote: I am running an embedded 533 MHz with 256 MB memory and it is woefully inadequate for an office setting. Even for a home setting which wants stuff like

Re: fsck segfault on a big partition, 4.6

2010-01-27 Thread Brad Tilley
On Wed, 27 Jan 2010 20:43 +, Rob Sheldon r...@associatedtechs.com wrote: [snip] softraid0 at root root on sd1a swap on sd1b dump on sd1b ...that's odd, it's showing swap (and dump) on sd1b, but there's no such thing: $ sudo df /dev/sd1b df: /dev/sd1b: Device not configured

Re: fsck segfault on a big partition, 4.6

2010-01-27 Thread Brad Tilley
Whoops... re-reading, I see that I missed your disklabel output... sorry. On Wed, 27 Jan 2010 17:25 -0500, Brad Tilley b...@16systems.com wrote: On Wed, 27 Jan 2010 20:43 +, Rob Sheldon r...@associatedtechs.com wrote: [snip] softraid0 at root root on sd1a swap on sd1b dump on sd1b

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-25 Thread Brad Tilley
On Mon, 25 Jan 2010 12:32 -0800, Ben Calvert b...@flyingwalrus.net wrote: Tracing this discussion back to it's origins earlier this month, I see the problem as arising from a statement made by a Mathematician (DJB) about the infallibility of his software when used with certain filesystems.

Re: The insecurity of OpenBSD

2010-01-22 Thread Brad Tilley
On Fri, 22 Jan 2010 07:22 -0600, Marco Peereboom sl...@peereboom.us wrote: It doesn't and I'll argue all day that it won't help you a bit. Here is an example: 1. running system with OMGACL 2. pkg_add -ui 3. couple of days later at 3am bz got come to the datacenter because the app

Re: Books on reverse engineering?

2010-01-21 Thread Brad Tilley
On Wed, 20 Jan 2010 17:52 -0800, James Hozier guitars...@yahoo.com wrote: With every single laptop I've bought/been given over the years, I was able to run OpenBSD on them almost flawlessly save a few quick/simple hacks to make anything that didn't work, work. The one main issue I've had

Re: the root is on

2010-01-16 Thread Brad Tilley
On Sat, 16 Jan 2010 14:37 +0100, Manuel Giraud manuel.gir...@univ-nantes.fr wrote: Otto Moerbeek o...@drijf.net writes: Here's a probably stupid question: since the kernel can detect the root on sd0a why is there still a need for fstab entry for it? Because you might want to specify

Re: thinkpad x200 wireless 5100 old issue

2010-01-12 Thread Brad Tilley
If this machine isn't production, then no harm could come from trying a snapshot. It would give the developers a much better idea as to where you system's at. Use a USB thumb drive if you're that worried about trashing your data. -- Aaron Mason - Programmer, open source addict

scsi output similar to atactl identify

2010-01-04 Thread Brad Tilley
Is there a way to get scsi output data similar to 'atactl device identify' output? # atactl /dev/rwd0c identify Model: Kingston SSDNow V Series 64GB, Rev: B090522a, Serial #: 06J990030232 Device type: ATA, fixed Cylinders: 16383, heads: 16, sec/track: 63, total sectors: 125045424 Device

Re: scsi output similar to atactl identify

2010-01-04 Thread Brad Tilley
On Tue, 05 Jan 2010 01:46 +1100, Jonathan Gray j...@goblin.cx wrote: For raid controllers like your mfi, you can use bioctl(8) to list some information about the individual drives. Not quite as informative as atactl... adding a -q breaks it: # bioctl -ihv sd0 Volume Status Size

Re: 802.11n cards for AP?

2010-01-01 Thread Brad Tilley
On Fri, 01 Jan 2010 19:16 -0500, Steven M. Caesare scaes...@caesare.com wrote: So... back in the 3.6ish days, I had a Prism-based 802.11b card that I used in my OpenBSD FW for a wireless access point. Worked like a charm until I relocated my FW, and could no longer get good RF coverage. Went

Re: testing a drive with dd -- odd results

2009-12-31 Thread Brad Tilley
On Thu, 31 Dec 2009 09:03 -0500, Scott McEachern sc...@erratic.ca wrote: I've been using dd to test some of my hard drives and just ran into the oddest of coincidences. I used this command (or variation without the time command) # time dd if=/dev/rwd0c of=/dev/null on three machines

  1   2   >