Re: Intercepting web proxy on different host from firewall

2015-07-15 Thread Darren Spruell
/ and in the end was defeated. A little more complexity than I really wanted. On Wed, Jul 15, 2015 at 5:23 AM, Craig Skinner skin...@britvault.co.uk wrote: Hi Darren, On 2015-07-14 Tue 17:47 PM |, Darren Spruell wrote: Shamefully realized I missed the documentation from /usr/local/share/doc/pkg-readmes

Intercepting web proxy on different host from firewall

2015-07-14 Thread Darren Spruell
,[|tcp] (DF) Is there any way to successfully configure this or similar sort of design with interception in Squid so that the proxy can reside on a different host than the firewall? [1] http://wiki.squid-cache.org/ConfigExamples/Intercept/OpenBsdPf -- Darren Spruell phatbuck...@gmail.com

Re: Intercepting web proxy on different host from firewall

2015-07-14 Thread Darren Spruell
Shamefully realized I missed the documentation from /usr/local/share/doc/pkg-readmes/ that covers this. Bad luser. Will RTFM. On Tue, Jul 14, 2015 at 4:46 PM, Darren Spruell phatbuck...@gmail.com wrote: [Internet] | | re1| +=+re2

Re: OT:Password strength

2014-11-30 Thread Darren Spruell
passwords that I actually remember. i too find it annoying when the set of valid password characters is not listed somewhere easy for the user to find. -wes -- Darren Spruell phatbuck...@gmail.com

Re: dhcpd(8) support for option domain-search

2014-01-02 Thread Darren Spruell
On Tue, Dec 24, 2013 at 8:22 AM, Kenneth R Westerback kwesterb...@gmail.com wrote: On Mon, Dec 23, 2013 at 12:03:13AM -0700, Darren Spruell wrote: Wanted to verify my understanding that the included dhcpd(8) in base does not currently support the domain-search option: option domain-search

dhcpd(8) support for option domain-search

2013-12-22 Thread Darren Spruell
-options(5) don't mention the option. I can currently override the search domains on clients, and it seems like it might be supported in isc-dhcp-server package. Anything likely to make it into base? Simply a matter of patch not having been submitted, or anything deeper than that? -- Darren Spruell

pgrep(1) not matching process pattern from rc script

2013-10-24 Thread Darren Spruell
targets root on wd0a (f79e8f05439765a0.a) swap on wd0b dump on wd0b -- Darren Spruell phatbuck...@gmail.com

SSDs in RAID and bio(4)

2013-10-17 Thread Darren Spruell
I don't have a great deal of experience with SSD disks but was spec'ing some systems to use them. We'd be doing RAID on the hosts and I'd prefer to have something supported by bio(4) for volume management. Do SSDs have any impact on ability to do this? Or can one use the same HW RAID controllers

Re: Best OpenBSD cloud hosting?

2013-10-12 Thread Darren Spruell
On Thu, Oct 10, 2013 at 12:55 AM, openda...@hushmail.com wrote: On 10. oktober 2013 at 7:15 AM, InterNetX - Robert Garrett robert.garr...@internetx.com wrote: I just want to know what a cloud is. Not really satisfied with the definition at http://en.wikipedia.org/wiki/Cloud_computing,

Re: Best OpenBSD cloud hosting?

2013-10-09 Thread Darren Spruell
On Tue, Oct 8, 2013 at 6:16 PM, openda...@hushmail.com wrote: Hi, Can anyone recommend a decent OpenBSD cloud hosting provider? No experience with their cloud services, but M5 Hosting proudly offers OpenBSD options. Maybe worth checking out: http://www.m5cloud.com/ -- Darren Spruell

Re: Interface input errors incrementing

2013-09-24 Thread Darren Spruell
due to no socket 0 multicast messages dropped due to no socket 0 messages dropped due to full socket buffers 0 delivered 0 datagrams output -- Darren Spruell phatbuck...@gmail.com

Re: Interface input errors incrementing

2013-09-24 Thread Darren Spruell
On Tue, Sep 24, 2013 at 5:18 AM, Stuart Henderson s...@spacehopper.org wrote: On 2013-09-24, Darren Spruell phatbuck...@gmail.com wrote: On Fri, Sep 20, 2013 at 12:13 PM, Alexey E. Suslikov alexey.susli...@gmail.com wrote: Any idea what the issue could be? could you provide netstat -s output

Interface input errors incrementing

2013-09-20 Thread Darren Spruell
on wd0b -- Darren Spruell phatbuck...@gmail.com

Re: error while adding amavisd....

2007-12-30 Thread Darren Spruell
On Dec 30, 2007 11:00 AM, badeguruji [EMAIL PROTECTED] wrote: root:84# pkg_add amavisd-new-2.3.2p0.tgz arc-5.21op0: complete Error from ftp://ftp.openbsd.org/pub/OpenBSD/4.2/packages/i386/: 550 Failed to open file. Error from ftp://ftp.openbsd.org/pub/OpenBSD/4.2/packages/i386/: 550 Failed

Re: backup firewall connectivity

2007-12-29 Thread Darren Spruell
On Dec 29, 2007 2:59 PM, Aaron [EMAIL PROTECTED] wrote: Otto Moerbeek wrote: I think your problem will be solved if you assign an alias in the 192.168.3.0 net to fxp0 and an alias in the 192.168.247.0 net to fxp3. Just like Henning already suggested. Henning wrote: that depends wether

Re: backup firewall connectivity

2007-12-29 Thread Darren Spruell
On Dec 29, 2007 4:41 PM, Aaron [EMAIL PROTECTED] wrote: I also added in my aliases on the external interface (two less aliases now), with the prescribed 255.255.255.255 netmask. All of my aliases now have only their address as the broadcast address. I realize this is right using a /32

Re: Ethernet jumbo frames?

2007-12-29 Thread Darren Spruell
On Dec 29, 2007 11:41 PM, Girish Venkatachalam [EMAIL PROTECTED] wrote: What on earth is this? http://www.cyberciti.biz/faq/rhel-centos-debian-ubuntu-jumbo-frames-configuration/ I was under the impression that Ethernet frames can never be more than 1500 bytes. Or is it some kind of stupid

Re: backup firewall connectivity

2007-12-28 Thread Darren Spruell
On Dec 28, 2007 7:13 AM, Aaron [EMAIL PROTECTED] wrote: main firewall Carp0: inet 192.168.3.65 255.255.255.224 192.168.3.95 vhid 1 carpdev fxp0 pass tester1 inet alias 192.168.3.66 255.255.255.224 inet alias 192.168.3.67 255.255.255.224 Not to solution your problem, but the correct netmask

Re: sendmail: smarthost help

2007-12-26 Thread Darren Spruell
On Dec 24, 2007 2:18 PM, Martin Schrvder [EMAIL PROTECTED] wrote: Hi, this is probably a stupid error, but I'm stuck. :-( I'm trying to set up my sendmail to use a smarthost. If I now do - sudo sendmail -bv [EMAIL PROTECTED] [EMAIL PROTECTED] deliverable: mailer relay, host

Re: BIND and logging channels in 4.2-current

2007-12-17 Thread Darren Spruell
On Dec 17, 2007 5:49 AM, J.D. Carlson [EMAIL PROTECTED] wrote: I am having trouble with BIND logging in my OpenBSD 4.2-current DNS server. I run it normally with this line in /etc/rc.conf.local: named_flags= # for normal use: My /var/named/etc/named.conf has these

Re: BIND reverse lookup

2007-12-16 Thread Darren Spruell
to help the rest of us out. -- Darren Spruell [EMAIL PROTECTED]

Re: Play Nice - Real men don't attack straw men (Theo)

2007-12-15 Thread Darren Spruell
On Dec 15, 2007 10:36 AM, Theo de Raadt [EMAIL PROTECTED] wrote: Richard is the face that launched a thousand Gnus. You as well as anyone here know what he did for the concept of giving away source code. He inspired a whole generation of free software writers. I was not inspired by him,

Re: i386: fxp re: both not 1000baseT by default

2007-12-15 Thread Darren Spruell
On Dec 15, 2007 8:22 PM, vladas [EMAIL PROTECTED] wrote: Hi, Should not both - fxp0 and re0 - autoselect 1000baseT by default by the dhclient? Both are connected to the same 1000M switch, no other tweaks in GENERIC's setup: re0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500

Re: Getting envolved

2007-12-14 Thread Darren Spruell
On Dec 13, 2007 7:39 PM, Jeremy Huiskamp [EMAIL PROTECTED] wrote: Users who can no invest the effort learn enough to use a simple interface do not deserve a reliable operating system. They deserve windows, and they deserve pop up buttong in their browsers that they click ok blindly

Re: : no 4.2-stable package updates??

2007-12-12 Thread Darren Spruell
On Dec 12, 2007 11:41 AM, knitti [EMAIL PROTECTED] wrote: On 12/12/07, Raimo Niskanen [EMAIL PROTECTED] wrote: On Wed, Dec 12, 2007 at 08:35:50AM +0100, Antoine Jacoutot wrote: On Tue, 11 Dec 2007, Joe wrote: So if there are security bugs in a package or port shipped with OpenBSD 4.2,

Re: : no 4.2-stable package updates??

2007-12-12 Thread Darren Spruell
On Dec 12, 2007 1:11 PM, knitti [EMAIL PROTECTED] wrote: On 12/12/07, Darren Spruell [EMAIL PROTECTED] wrote: Why -current? I thought what had fallen behind from lack of resources was binary packages. Surely OPENBSD_4_2 (stable branch of ports tree) still has updated ports. Just build

Re: Can I specify the bios time offset utc?

2007-12-10 Thread Darren Spruell
On Dec 10, 2007 9:58 PM, Dongsheng Song [EMAIL PROTECTED] wrote: OpenBSD assume bios time is utc, but it's PRC, can I tell OpenBSD the bios time zone? http://marc.info/?l=openbsd-miscm=111956694726618w=2 DS

Re: Can I specify the bios time offset utc?

2007-12-10 Thread Darren Spruell
On Dec 10, 2007 10:58 PM, Dongsheng Song [EMAIL PROTECTED] wrote: On Dec 10, 2007 9:58 PM, Dongsheng Song [EMAIL PROTECTED] wrote: OpenBSD assume bios time is utc, but it's PRC, can I tell OpenBSD the bios time zone? http://marc.info/?l=openbsd-miscm=111956694726618w=2 Thanks, but I

Re: removing sendmail

2007-12-02 Thread Darren Spruell
On Dec 2, 2007 2:21 PM, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Sun, Dec 02, 2007 at 12:56:11PM -0700, Anthony Roberts wrote: I have seen several installations of Postfix go catatonic due to spam overload, large messages, mailing list expansions, and other undiagnosed problems.

Re: OpenBSD for routing firewalling a 100Mbit/s connection

2007-12-01 Thread Darren Spruell
On Dec 1, 2007 11:12 AM, Iqigo Tejedor Arrondo [EMAIL PROTECTED] wrote: El sC!b, 01-12-2007 a las 17:55 +0100, Henning Brauer escribiC3: * Carl Roberso [EMAIL PROTECTED] [2007-12-01 17:32]: I don't have any CPU problem, but an impressive (vmstat -i) amount of interrupts (something like

Re: Best way to automate administration of multiple servers

2007-11-27 Thread Darren Spruell
On 14/11/2007, Mikel Lindsaar [EMAIL PROTECTED] wrote: Hello all, I want to automate handling them as much as possible and would like some list suggestions on reading materials, software, or web howtos. http://tentakel.biskalar.de/ http://www.garbled.net/clusterit.html

Re: Compromising a host with pf enabled?

2007-11-21 Thread Darren Spruell
On Nov 19, 2007 10:53 PM, Clint Pachl [EMAIL PROTECTED] wrote: In my DMZ research, some sources state that all services need to be replicated in each DMZ. Following that advice, I would have to setup Kerberos, ntp, backup, and DNS in each DMZ and the LAN; that sounds like a lot of work. What

Re: [OT] making Firefox respect telnet:// URLs

2007-11-13 Thread Darren Spruell
On Nov 12, 2007 7:21 PM, Linus Swdlas [EMAIL PROTECTED] wrote: On Mon, 12 Nov 2007 18:25:57 +0100, William Boshuck [EMAIL PROTECTED] wrote: On Mon, Nov 12, 2007 at 02:02:32AM +0100, Linus Swdlas wrote: On Mon, 12 Nov 2007 00:25:29 +0100, ropers [EMAIL PROTECTED] wrote: feel free to

Re: Security Comparisons

2007-11-09 Thread Darren Spruell
On Nov 9, 2007 10:53 AM, new_guy [EMAIL PROTECTED] wrote: If this is off-topic, I apologize. Just tell me and I'll go away ;) I'm having discussions with a coworkers about moving to OpenBSD for Apache/PHP web hosting. Right now, we use various Linux distros. I have no problem with that. Linux

Re: OpenBSD kernel janitors

2007-11-03 Thread Darren Spruell
On Nov 3, 2007 4:29 AM, Karel Kulhavy [EMAIL PROTECTED] wrote: They write code, then they submit it, it does not suck too much and they take the suggestions of the current project leads. Then they resubmit better code. The rest of us should simply buy CD's, ask and answer the occasional

Re: mutt + reply-to

2007-11-02 Thread Darren Spruell
On Nov 2, 2007 4:48 PM, Sean Darby [EMAIL PROTECTED] wrote: Hi Stuart, Thank you very much for the info! I appreciate it a lot. I've now updated my /etc/mail/trusted-users file with my [EMAIL PROTECTED] address (which is what I currently have in my from: field in my muttrc). er, no.

Re: carp(4) and pfsync(4) port numbers and types?

2007-10-27 Thread Darren Spruell
On 10/27/07, ropers [EMAIL PROTECTED] wrote: I understand from http://www.openbsd.org/lyrics.html#35 that carp uses IP protocol 112. Does that mean CARP's port is 112? Does CARP use a TCP or UDP port, or both? See also protocols(5) for information. DS

Re: max number of groups

2007-10-26 Thread Darren Spruell
On 10/26/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Fri, Oct 26, 2007 at 09:55:13AM -0700, Ted Unangst wrote: On 10/25/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Thu, Oct 25, 2007 at 10:19:19AM -0600, Theo de Raadt wrote: Well, there is no solution. 16 was chosen a lot of

Re: About Xen: maybe a reiterative question but ..

2007-10-24 Thread Darren Spruell
On 10/24/07, L. V. Lammert [EMAIL PROTECTED] wrote: At 12:03 PM 10/24/2007 -0600, Theo de Raadt wrote: Anything we can do to increase security, *including* setting up VMs (of any flavor) is an improvement [that also increased hardware utilization]. This last sentence is such a lie.

Re: About Xen: maybe a reiterative question but ..

2007-10-24 Thread Darren Spruell
On 10/24/07, Henning Brauer [EMAIL PROTECTED] wrote: * Darren Spruell [EMAIL PROTECTED] [2007-10-24 21:48]: Remember back 10-ish years ago when VLANs were being touted as the ultimate network segmentation technology by marketers of managed switches? And now everyone hopefully realizes

Re: BIND

2007-10-22 Thread Darren Spruell
On 10/22/07, Regie H. Saberon [EMAIL PROTECTED] wrote: Thanks for quick response, I want to set-up a Primary Domain Name Server, so that I hosts my own domain. Is there any good wiki that I can follow? You have a few options. - http://www.isc.org/index.pl?/sw/bind/index.php - look at the

Re: Wireless WAP encryption question

2007-10-19 Thread Darren Spruell
On 10/19/07, Luca Corti [EMAIL PROTECTED] wrote: AFAIK noone is working on it. ... Sure I am not following source changes regularly, I don't believe this is a requirement to just use the system. It *is* a requirement to comment intelligently on what is or is not being worked on. DS

Re: Thank you developers... 4.2 arrived in the mail today

2007-10-05 Thread Darren Spruell
On 10/5/07, Chad M Stewart [EMAIL PROTECTED] wrote: On Oct 5, 2007, at 2:53 PM, Karsten McMinn wrote: On 10/5/07, Chad M Stewart [EMAIL PROTECTED] wrote: My 4.2 CDs and t-shirt arrived in the mail today (near Buffalo, NY) drat, I was hoping for first the first post. you forgot the pic.

Packets with IP options passed

2007-10-04 Thread Darren Spruell
I've noticed a few of these PF log entries that were logging traffic passed and containing IP options: Sep 30 22:52:12.586548 rule 32/(ip-option) [uid 0, pid 9872] pass in on sis1: 10.0.1.23.1031 x.x.13.31.1: [udp sum ok] udp 68 (ttl 255, id 5, len 100, optlen=4 IPOPT-148{4})

Re: digitally signed distribution (was: OBSD's perspective on SELinux)

2007-09-25 Thread Darren Spruell
Sure it does, just pull from CVS over SSH and compile your own. Only Where do I get the ssh fingerprints of the CVS servers? http://www.openbsd.org/anoncvs.html#CVSROOT, of course. Not all are listed, but one can either use one that needs verified or contact the maintainer for a correct

Re: lock(1) to lock all virtual terminals?

2007-09-24 Thread Darren Spruell
On 9/23/07, Todd Alan Smith [EMAIL PROTECTED] wrote: On 9/23/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Sun, Sep 23, 2007 at 05:23:37PM -0600, Chris Kuethe wrote: On 9/23/07, Todd Alan Smith [EMAIL PROTECTED] wrote: Does lock -nv not work? I just read about this in BSD Hacks last

Re: OBSD's perspective on SELinux

2007-09-24 Thread Darren Spruell
On 9/24/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On 24.09-11:49, Can E. Acar wrote: [ ... ] The guy can be some stupid binary software with an if(uid!=root) bail(); People running arbitrary binary software requiring root on their systems deserve what they get. You can not work

Re: OpenBSD firewalls as virtual machine ?

2007-09-22 Thread Darren Spruell
On 9/20/07, Nick Holland [EMAIL PROTECTED] wrote: Read this: http://advosys.ca/viewpoints/2007/04/fuzzing-virtual-machines/ Read the paper linked there as well. Always good to go back to original source material. Anyone who told you VM technology and security had anything to do with each

Re: OpenBSD firewalls as virtual machine ?

2007-09-21 Thread Darren Spruell
On 9/20/07, Nick Holland [EMAIL PROTECTED] wrote: Can someone please inform me if this is a really bad idea or not, ideally with some nice reasoning? Cheers, Josh Read this: http://advosys.ca/viewpoints/2007/04/fuzzing-virtual-machines/ Read the paper linked there as well.

Re: OpenBSD firewalls as virtual machine ?

2007-09-21 Thread Darren Spruell
On 9/21/07, Scott Wells [EMAIL PROTECTED] wrote: However, I don't fully agree with the sentiment that running a firewall in a virtual machine (let's be specific, VMWare ESX) guest environment. I'm running my firewall on a ESX 3.0.2 guest, and it works perfectly fine. That being said, you have

Re: Microsoft gets the Most Secure Operating Systems award

2007-09-20 Thread Darren Spruell
On 9/20/07, The One [EMAIL PROTECTED] wrote: Don't bother following up, I won't be listening. Or maybe I will, and I might even venture out from under my rock again before 4.4 ships. If anyone can solve security, whether it is with Leopard or in the future, Apple definitely can. In my

Re: Is AMD64 page out of date about W^X?

2007-09-20 Thread Darren Spruell
On 9/20/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: According to: http://www.openbsd.org/amd64.html W^X will not work on Intel's 64 bit chips. I for one chose to go with i386 on my Core 2 because of this fact alone. Intel produces 2 families of 64-bit processors; the EM64T and an AMD64

Re: OpenBSD Install Goal

2007-09-18 Thread Darren Spruell
On 9/18/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: You are given a brand new machine; you bring your install CD; and after four minutes of using the standard tools (disklabel, fdisk, ifconfig, ...) you are already very familiar with, you have a fully working box, modulo afterboot. The

Re: Bug in the wireless wpi driver ?

2007-09-16 Thread Darren Spruell
On 9/16/07, Catalin Stoian [EMAIL PROTECTED] wrote: I did a fresh install of OpenBSD-CURRENT on my new laptop, an Acer Aspire 5610 that comes with an Intel 3945 wireless adapter. But it seems I can't use the adapter with OpenBSD.Following the wpi manpage, I installed the

Re: FW: Problem with ftp-proxy -- additional info

2007-09-15 Thread Darren Spruell
On 9/14/07, Jason [EMAIL PROTECTED] wrote: Hello all, Ok, here is a sample. I tried a connection from my workstation 10.0.0.103 to ftp.openbsd.org. Firewall's pf.conf ---BEGIN if_loopback=lo0 # loopback if_public=em1 # connected to public network if_int=bnx1 #

Re: Problem with ftp-proxy

2007-09-14 Thread Darren Spruell
On 9/14/07, Jason Calhoun [EMAIL PROTECTED] wrote: Hi, I have an OpenBSD 4.1 system running as a NAT firewall for our office and unfortunately I have to support a couple of active FTP clients on the inside of the firewall, so I've set up ftp-proxy. I've never used ftp-proxy before and I've

Re: unix on lenovos

2007-09-13 Thread Darren Spruell
On 9/13/07, Julian Leyh [EMAIL PROTECTED] wrote: On 20:52 Wed 12 Sep , Pau Amaro-Seoane wrote: You'll notice that Mark Kohut (Lenovo's worldwide analyst) cannot tell the difference between linux and BSD (both freebsd and openbsd fall in the category of linux) but, in any case, maybe you

Re: The Atheros story in much fewer words

2007-09-13 Thread Darren Spruell
On 9/13/07, Claudio Jeker [EMAIL PROTECTED] wrote: The FSF should take a deep breath and apologize to Reyk, apologize to Theo, apologize to OpenBSD and apologize to the open source community at large. While reading this I got a mail that OpenSolaris released the adapted version of our

Re: The Atheros story in much fewer words

2007-09-13 Thread Darren Spruell
On 9/13/07, Shawn K. Quinn [EMAIL PROTECTED] wrote: On Thu, 2007-09-13 at 07:09 -0400, Nick Holland wrote: GNUspeak: These are definitely not the views of the GNU project. They *might* be views of the self-styled Linux nerds that think they are k00l and eleet because they read Slashdot, but

Re: OpenBSD Install Goal

2007-09-13 Thread Darren Spruell
On 9/13/07, Steve Shockley [EMAIL PROTECTED] wrote: Bob Beck wrote: As OpenBSD grows there simply is no reason, or logic to keeping around such an archaic method of installation it now uses. I await your diffs! Please feel free to write one that works, and fits on the install media for

Re: SMP

2007-09-13 Thread Darren Spruell
On 9/13/07, Cyrus [EMAIL PROTECTED] wrote: Im currently running openbsd 4.1 on my server, Proliant 8500. This server is SMP with 4x 700MHz PIII proc. Im just wondering, is it using all four cpu's? or do I have to configure the system to utilize SMP? SMP is the kernel that supports multiple

Re: SMP

2007-09-13 Thread Darren Spruell
On 9/13/07, Darren Spruell [EMAIL PROTECTED] wrote: On 9/13/07, Cyrus [EMAIL PROTECTED] wrote: Im currently running openbsd 4.1 on my server, Proliant 8500. This server is SMP with 4x 700MHz PIII proc. Im just wondering, is it using all four cpu's? or do I have to configure the system

serial port usage

2007-09-13 Thread Darren Spruell
For the scenario where you have two openbsd hosts, one connected to the second with a serial null modem cable, what is the right device to use when connecting using tip(1) from the first to a console on the second? These suggest that cua is the right device to use:

Re: What Linux distribution would you most like to see supported on a ThinkPad?

2007-09-12 Thread Darren Spruell
On 9/12/07, Sunnz [EMAIL PROTECTED] wrote: http://lenovoblogs.com/insidethebox/?p=98 Interestingly both FreeBSD and OpenBSD are listed as a choice of Linux distro; as well as anyone that refuses to carry binary-only drivers, so that all others will also benefit, as it will require documented

Re: filesystems?

2007-09-06 Thread Darren Spruell
On 9/6/07, Jona Joachim [EMAIL PROTECTED] wrote: On Thu, 6 Sep 2007 07:11:47 -0700 J.C. Roberts [EMAIL PROTECTED] wrote: On Tuesday 04 September 2007, Jona Joachim wrote: On Mon, 3 Sep 2007 18:17:44 +0200 Martin SchrC6der [EMAIL PROTECTED] wrote: 2007/9/3, The One [EMAIL

Re: OpenBSD 4.2 Question

2007-09-06 Thread Darren Spruell
On 9/6/07, Sam Fourman Jr. [EMAIL PROTECTED] wrote: hello misc@ from the page http://www.openbsd.org/42.html , one of the changes made to OpenBSD 4.2 is A change in the way the kernel random pool is stirred greatly increases performance with network interface cards that support interrupt

Re: More on the Atheros driver situation

2007-09-01 Thread Darren Spruell
On 9/1/07, Steven [EMAIL PROTECTED] wrote: If code is released under copyright. be it BSD, or GPL, and someone other than the author(s) changes the license, can the person(s) who(m) made the changes seriously expect that somebody else cannot take that code under the terms of the original

Re: That whole Linux stealing our code thing

2007-09-01 Thread Darren Spruell
On 9/1/07, Siju George [EMAIL PROTECTED] wrote: On 9/1/07, Marco Peereboom [EMAIL PROTECTED] wrote: Try to run strings on windows command line utilities. You'll see that they preserved the copyrights as required. Could somebody please explain about Running Strings? strings(1) -

Re: That whole Linux stealing our code thing

2007-09-01 Thread Darren Spruell
On 9/1/07, David H. Lynch Jr. [EMAIL PROTECTED] wrote: Constantine A. Murenin wrote: That is entirely false. Why ? The ISC seems to me to say you can do anything you wish - except remove the copyright. ... but I do not see anything in the license that requires preserving the license.

Re: OpenBSd or HP-UX?

2007-08-29 Thread Darren Spruell
On 8/29/07, Jussi Peltola [EMAIL PROTECTED] wrote: On Tue, Aug 28, 2007 at 09:17:11PM +0200, Joachim Schipper wrote: P.S. One more issue: you *do* realize that getting OpenBSD to authenticate against LDAP is not entirely trivial, right? This might be a serious problem if the LDAP system is

Re: openbsd instead of cisco vpn client

2007-08-27 Thread Darren Spruell
On 8/27/07, Paolo Supino [EMAIL PROTECTED] wrote: Hi I came across the following situation: there's network where several employees have access to a client of theirs using Cisco VPN clients. To centralize and ease administration I want to put in place an OpenBSD box that will create a

Re: Backport drivers from 4.1 to 4.0

2007-08-27 Thread Darren Spruell
On 8/27/07, Kevin Cheng [EMAIL PROTECTED] wrote: Artur, Thanks, Upgrade code based on release of obsd is easy, but it would a big job to maintain early released of products based on previous version of obsd. For example, we would maintain 8 version of products from 3.3 to 4.0 if codes are

Re: OpenBSd or HP-UX?

2007-08-27 Thread Darren Spruell
On 8/27/07, Alvaro Mantilla Gimenez [EMAIL PROTECTED] wrote: Travers Buda wrote: *snip* Just tell him that OpenBSD in the stead of HP-UX will be cheaper, faster to setup, and easier to maintain (because of your experience with Open.) Both OpenBSD and HP-UX can do LDAP, yes, but it's

Re: Compiling Release Patches

2007-08-25 Thread Darren Spruell
On 8/25/07, Clint Pachl [EMAIL PROTECTED] wrote: The reason for this is that I can use a single build machine running the current release, and two source trees, current and previous. [1] Well, it usually does, but it can break in interesting ways that are difficult to fix. Joachim, your

Re: Securing syslog in insecure mode (syslog -u )

2007-08-24 Thread Darren Spruell
On 8/24/07, Lars Noodin [EMAIL PROTECTED] wrote: Is there a recommended best practice for securing a remote log server? Is it worth it to try to tunnel between the machines? Would be good to know what is meant by securing, as in what exact sense of security are you trying to address? DS

Re: bind 9 cache poisoning

2007-08-20 Thread Darren Spruell
On 7/25/07, Allen [EMAIL PROTECTED] wrote: Richard Storm wrote: Is openbsd bind vulnerable to attacks on binds PRNG described here: http://www.securiteam.com/securitynews/5VP0L0UM0A.html A glance at the README.OpenBSD file for 4.1 in /usr/src/usr.sbin/bind shows (among other things): -

Re: route command

2007-08-18 Thread Darren Spruell
On 8/18/07, steve [EMAIL PROTECTED] wrote: It must have been too long ago since I built routers under BSD. I got three subnets in a series below the internet connection and cannot add a proper route between subnet 1 and 3. I've tried numerous route commands but it never results in routing it

Re: route command

2007-08-18 Thread Darren Spruell
On 8/18/07, steve szmidt [EMAIL PROTECTED] wrote: On Saturday 18 August 2007 22:19, steve wrote: Hmm, I had added the route commands to rc.local and with each edit executed sh netstart which of course does not read rc.local. See hostname.if(5), and particularly the description for

Re: howto set global environment variable (e.g. PATH, JAVA_HOME)

2007-08-08 Thread Darren Spruell
On 8/8/07, Lars Hansson [EMAIL PROTECTED] wrote: On 8/9/07, Clint Pachl [EMAIL PROTECTED] wrote: Or you could programatically change each user's .profile. Uhm, why? Markus is correct that both /etc/profile and $HOME/.profile are sourced when you log in so to set up global variables you set

Source port allocation and named(8)

2007-08-03 Thread Darren Spruell
Has named(8) on OpenBSD ever used randomized source ports for DNS queries? I thought for some reason it had and noticed today that this probably was not right: 10.0.1.2.34140 192.35.51.30.53: 64395% [1au] ? sec1.apnic.net. (43) 10.0.1.2.34140 192.0.34.126.53: 50119% [1au] ?

Re: spamd - 250 return text

2007-08-03 Thread Darren Spruell
On 8/3/07, Tom Bombadil [EMAIL PROTECTED] wrote: Hi all, Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? - 250 Hello, spam sender. Pleased to be wasting your time. - 250 You are about to try to deliver spam. Your time will be spent, for

Re: how to clear dmesg outpout

2007-07-06 Thread Darren Spruell
On 7/6/07, Jose H. [EMAIL PROTECTED] wrote: Kernel messages since a certain time and hide the hardware specs from users will be achieved the same way, suppose you have a parameter for dmesg that prints the current buffer and then clears it. I don't think it is a silly knob, in fact it may be

Re: can not install binaries with pkg_add

2007-07-01 Thread Darren Spruell
On 7/1/07, Alden Pierre [EMAIL PROTECTED] wrote: Hello All, I'm having a hard time trying to install packages on my machine. 1. PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/4.1/packages/i386/ 2. pkg_add -i screen gives me the following: sh: cannot create

Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

2007-06-29 Thread Darren Spruell
On 6/29/07, Matt [EMAIL PROTECTED] wrote: In their homedir there is a `ln -s` to their /var/www/home/username webspace. That webspace is chowned username:www and chmodded 770 so httpd can access/write to their dir as well. Is that advisable / workable? Other ideas? You don't want the www user

Re: http://openbsd.rt.fm/faq/faq10.html#httpdchroot

2007-06-18 Thread Darren Spruell
On 6/17/07, Darrel [EMAIL PROTECTED] wrote: http://openbsd.rt.fm/faq/faq10.html#httpdchroot Per the heading 'What is a chroot?', I plan to change the owner of all the files in the /var/www directory as read-only by User www. Should the group of directories and files be changed to www as well?

Re: [OT] Open Source OSS for OpenBSD?

2007-06-16 Thread Darren Spruell
On 6/16/07, Aaron Hsu [EMAIL PROTECTED] wrote: [snip] Is this the correct interpretation or not? So far off base, it seems like you haven't even read it. DS

Re: Looking for other ideas to encrypt a wifi connection

2007-06-14 Thread Darren Spruell
On 6/14/07, Steve B [EMAIL PROTECTED] wrote: Recently I acquired an old Belkin wireless nic that has an RTL8180D chipset on it. It supports Host AP and is working nicely. Thanks to all those who helped breath life into that card/chipset! Dmesg reports it as: rtw0 at pci0 dev 10 function 0

Re: [OT] Open Source OSS for OpenBSD?

2007-06-13 Thread Darren Spruell
On 6/13/07, Edd Barrett [EMAIL PROTECTED] wrote: Hi guys, I have been reading a thread on opensolaris.org regarding the open-sourcing of 4front's OSS. After explaining why CDDL licensing is unsuitable for OpenBSD, some of the developers have expressed an interest to contact Theo regarding

Re: Spamd variation

2007-06-12 Thread Darren Spruell
On 6/12/07, Soner Tari [EMAIL PROTECTED] wrote: Probably a simple shell script could do the job, which would look at SpamAssassin logs to find out the spam score and IP address, and insert into spamd blacklists as necessary. The only caveat is that threshold spam score for blacklisting should be

Re: WWW to go public, if pf would let me

2007-06-10 Thread Darren Spruell
On 6/9/07, Bryan Vyhmeister [EMAIL PROTECTED] wrote: On Jun 9, 2007, at 9:28 PM, Darren Spruell wrote: So, not sure about the connections failing. As for your aliases, check hostname.if(5) and you'll see that IPv4 interface aliases typically have full /32 subnet masks. Sorry! I spoke too

Re: T1 pci card

2007-06-10 Thread Darren Spruell
On 6/10/07, Lawrence Horvath [EMAIL PROTECTED] wrote: I am looking for a Data T1 card to put in an OBSD firewall/router looking for suggestions on a quality card for under 1000 that OBSD supports reasonably well. digium offers the Wildcard TE120P for about 600 but i was unsure of support where

Re: WWW to go public, if pf would let me

2007-06-09 Thread Darren Spruell
On 6/9/07, Bray Mailloux [EMAIL PROTECTED] wrote: Hello Everyone; # ifconfig -A rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:50:bf:3a:2e:66 groups: egress media: Ethernet autoselect (100baseTX full-duplex) status: active inet6

Re: About BSD Certification

2007-06-08 Thread Darren Spruell
On 6/8/07, Rico Secada [EMAIL PROTECTED] wrote: Hi What do you think of The BSD Certification Group at bsdcertification.org? Is this a good idea? From my perspective it looks like a smart marketing way. A way to make money from people who think this would help in some way. Read up about the

Re: Quad ethernet card

2007-06-06 Thread Darren Spruell
On 6/6/07, Ronnie Garcia [EMAIL PROTECTED] wrote: Henning Brauer a icrit : * nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf disabled) measured using iperf.

Re: alternatives to sendmail

2007-06-04 Thread Darren Spruell
On 6/4/07, Douglas Allan Tutty [EMAIL PROTECTED] wrote: On Mon, Jun 04, 2007 at 03:28:50PM +0200, Timo Schoeler wrote: Thus [EMAIL PROTECTED] (Peter N. M. Hansteen) spake on Mon, 04 Jun 2007 15:17:26 +0200: Douglas Allan Tutty [EMAIL PROTECTED] writes: However, sendmail is a very steep

Re: Reclaim mounted space

2007-06-03 Thread Darren Spruell
/ | http://metabug.org/ http://www.stilyagin.com/ | Daemons in the Desert | Global BUG Federation -- -Lawrence -Student ID 1028219 -CCNA -- Darren Spruell [EMAIL PROTECTED]

Re: c2k7 hackathon is over

2007-06-02 Thread Darren Spruell
On 6/2/07, Theo de Raadt [EMAIL PROTECTED] wrote: The c2k7 hackathon is over, with roughly 50 developers attending the event for 10 days in Calgary. So many projects were started or finished, it is basically impossible for me to describe all the projects. I elect merdely to fill in all the

Re: No text cursor on OpenBSD/i386 4.1

2007-05-31 Thread Darren Spruell
On 5/31/07, Chris S [EMAIL PROTECTED] wrote: On 5/29/07, Andrey Shuvikov [EMAIL PROTECTED] wrote: I chainload OpenBSD with GRUB also and don't have any problems with cursor... It might really be Ubuntu's modified version that is to blame... for instance, the standard menu.lst features a quiet

Re: Packets Per Second Limit?

2007-05-31 Thread Darren Spruell
On 5/31/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Anyone know the maximum packets per second that can traverse a 100MB internet link. From what I've been able to gather its about 8300 or so? Is this number accurate? Do connections just start to timeout once I hit this limit? I'm a little

Re: Packets Per Second Limit?

2007-05-31 Thread Darren Spruell
On 5/31/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: [...] by the way. I know where google is. I've been there and have even read some of the links that are posted in this very thread. However I am confused and there even seems to be some confusion/discrepancies within this thread... so I

  1   2   3   >