i have a proposal of trasaction of fund sum 12.6million usd I want to transfer

2009-01-10 Thread denis kabore
You are invited to i have a proposal of trasaction of fund sum 12.6million usd 
I want to transfer.


By your host denis kabore:


 Date:  Saturday January 10, 2009

 Time:  8:00 am - 9:00 am (GMT +00:00)

Guests:

 * micxy...@hotmail.co.uk
 * m...@oddcity.fsnet.co.uk
 * mikkimcla...@hotmail.com
 * miky...@hotmail.it
 * milesjohn...@hotmail.com
 * millababii...@yahoo.com
 * miniho...@hotmail.com
 * mirap...@hotmail.com
 * misc@openbsd.org
 * miss_bad_cu...@hotmail.com
 * missyb...@yahoo.com
 * misterma...@yahoo.com
 * mitche...@hotmail.com
 * miz.rah...@tiscali.co.uk
 * mjcollie...@btinternet.com
 * mjennej...@yahoo.com
 * mm_galbra...@hotmail.com
 * mmedi...@hotmail.com
 * mngi...@hotmail.co.uk
 * mona.mar...@synovate.com
 * monsterboy_nish_n...@hotmail.com
 * montgomeryt...@hotmail.com
 * moorefieldbra...@yahoo.com
 * moose1...@hotmail.co.uk
 * mopar...@hotmail.com
 * mosel...@pacbell.net
 * mountfor...@hotmail.com
 * moy...@hotmail.com
 * m...@hotmail.com
 * mr.ama...@hotmail.com
 * mrj...@hotmail.com
 * mrsyaifulbahr...@hotmail.com
 * mscottschill...@hotmail.com
 * mseansm...@hotmail.com
 * msglorypela...@yahoo.com.ph
 * mssouthde...@hotmail.co.uk
 * mtay...@grove4.demon.co.uk
 * mtgi...@removethis.yahoo.com
 * munday2...@hotmail.co.uk
 * musicboxestu...@hotmail.com
 * musician2wors...@yahoo.com
 * mu...@cafc.co.uk
 * muzzy_fo...@hotmail.co.uk
 * mvdsl.comdelewk...@hotmail.com
 * mvnews...@hotmail.com
 * mwelber...@googlemail.com
 * mwke...@ihug.co.nz
 * mx4hnp7...@hotmail.com
 * myer...@msn.com
 * nad...@hotmail.com
 * nadr...@hotmail.com
 * nai2...@hotmail.co.uk
 * nancyp...@hotmail.com
 * na...@hotmail.com
 * narutoche...@hotmail.co.uk
 * nash_nic...@y.c.ph
 * nbenn...@hotmail.co.uk
 * ncis.gi...@hotmail.co.uk
 * neamat...@hotmail.com
 * neilelliot...@hotmail.com
 * neko...@hotmail.co.uk
 * ne...@netzero.net
 * neonricekil...@hotmail.com
 * n...@tlio.org.uk
 * nextxaj...@hotmail.com
 * nger...@hotmail.com
 * ngib...@hotmail.com
 * nice_cute1...@y.ph
 * nicholas.b...@yahoo.com
 * n...@nickrobinsons.co.uk
 * nickand...@hotmail.com
 * nickpig...@yahoo.com.au
 * nickru...@hotmail.com
 * nicola_thomas1...@hotmail.com
 * nicolemus...@hotmail.co.uk
 * nicolesingleton...@hotmail.com
 * nicoletteby...@hotmail.co.uk
 * nikki.sosa65...@hotmail.com
 * nlj...@hotmail.com
 * nnpascual...@yahoo.com.ph

invitation_add_to_your_yahoo_calendar:

 
http://calendar.yahoo.com/?v=60ST=20090110T08%2BTITLE=i+have+a+proposal+of+trasaction+of+fund+sum+12.6million+usd+I+want+to+transferDUR=0100VIEW=dDESC=i+have+a+proposal+of+trasaction+of+fund+sum+12.6million+usd+I+want+to+transferTYPE=10


Copyright ) 2009 All Rights Reserved
 www.yahoo.com

Privacy Policy:
 http://privacy.yahoo.com/privacy/us

Terms of Service:
 http://docs.yahoo.com/info/terms/



Re: OpenBGPD Flaps, 32bit ASn in the wild.

2009-01-10 Thread Falk Brockerhoff

Am 10.12.2008 um 23:32 schrieb Claudio Jeker:

The best thing we can do is to mark the update as ineligible so it  
will

not propaget further and will not be used but this is a quite radical
measure. On the other hand this is porbably the safest way to handle  
this

error.


Sound good for me. Is there any patch I can download and compile bgpd  
on my own?



:wq Claudio


Regards,

Falk



Re: How to determine my ip address (logged in via ssh)

2009-01-10 Thread Falk Brockerhoff

Am 09.01.2009 um 12:21 schrieb Darren Tucker:


echo $SSH_CLIENT | cut -f1 -d' '


Perfect. Thank you (and all the others) for your support!




Falk



Re: Create a bootable usb key?

2009-01-10 Thread Guillaume Thouvenin

Lars NoodC)n larsnoo...@openoffice.org a C)crit :


The way I did it was to boot /bsd.rd and then do an installation to the
USB key but installing a single set, bsd.rd, and only that set.  Then
after booting back to the regular system mounted the stick and added
/etc/boot.conf by hand.

What I'd like to do eventually is set up grub or something so I have a
menu to choose the different options 4.3, 4.4, release, stable, current,
i386, amd64, etc.


Finally here is what I've done. The problem was I only have a computer
with linux and an internet connexion and I wanted to install openbsd on
a laptop without using CD or working internet connexion.

- I installed openbsd on a USB Key using qemu + install44.iso
- I added an openbsd install sets on the USB key
- I modified the /etc/fstab in order to be able to boot on the real
system from the usb key
- I booted bsd.rd on the laptop
- I installed OpenBSD on the hard disk of the laptop
- reboot it
- ... and let the real fun begin :)

Now next step is to have wired network working and so add support to my
Attansic Technology L1E.

Regards,
Guillaume



4.4 behind router - Apache not responding from external

2009-01-10 Thread KammyDoe
I have OpenBSD 4.4 installed on this server of mine, it works perfectly well
with everything on the LAN; http, ftp, etc. But it doesn't respond to external
requests, from the internet. I don't know if there's a line in the config that
I've missed or something, because pf is set up to let everything in and out
(just for now).

I have set up port forwarding and all the stuff on the router side of things, it
may still be a router problem, though. BSD seems to be set up correctly.

Any help would be much appreciated!
- Thomas



Re: 4.4 behind router - Apache not responding from external

2009-01-10 Thread Darrin Chandler
On Sat, Jan 10, 2009 at 04:36:47PM +, KammyDoe wrote:
 I have OpenBSD 4.4 installed on this server of mine, it works perfectly
well
 with everything on the LAN; http, ftp, etc. But it doesn't respond to
external
 requests, from the internet. I don't know if there's a line in the config
that
 I've missed or something, because pf is set up to let everything in and out
 (just for now).

 I have set up port forwarding and all the stuff on the router side of
things, it
 may still be a router problem, though. BSD seems to be set up correctly.

 Any help would be much appreciated!

Without more information it could be almost anything. Things you might
do:

* reduce to simplest pf.conf with problems and post it here
* enable pflog and tcpdump on pflog0 to see which rule matches for
  block, or if the traffic is even getting that far
* disable pf and see if it works

--
Darrin Chandler|  Phoenix BSD User Group  |  MetaBUG
dwchand...@stilyagin.com   |  http://phxbug.org/  |  http://metabug.org/
http://www.stilyagin.com/  |  Daemons in the Desert   |  Global BUG
Federation

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: OpenBGPD Flaps, 32bit ASn in the wild.

2009-01-10 Thread tico

Falk Brockerhoff wrote:

Am 10.12.2008 um 23:32 schrieb Claudio Jeker:


The best thing we can do is to mark the update as ineligible so it will
not propaget further and will not be used but this is a quite radical
measure. On the other hand this is porbably the safest way to handle 
this

error.


Sound good for me. Is there any patch I can download and compile bgpd 
on my own?


Regards,

Falk


Falk,

Read the rest of the thread to which you've just responded:

http://marc.info/?l=openbsd-miscm=122894875212174w=2

http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/bgpd/rde.c

-Tico



OpenBGPd on OpenBSD (Failover + Load balancing)

2009-01-10 Thread Laurent CARON

Hi,

I'm about to get my own AS to be able to get good redundancy from 2 ISP 
(Fiber + DSL).


Since a cisco solution is not really cheap i'm wondering how a similar 
solution could run on OpenBSD.


Requirements:
- Load balancing
- Failover
- Throughput (i know we should talk in pps...): 20Mb/s (soon to expect 50Mb)
- Rock solid solution

Do you think an openBGP/openBSD solution is viable considering those 
requirements ?


Thanks



Re: OpenBGPd on OpenBSD (Failover + Load balancing)

2009-01-10 Thread tico

Laurent CARON wrote:

Hi,

I'm about to get my own AS to be able to get good redundancy from 2 
ISP (Fiber + DSL).


Since a cisco solution is not really cheap i'm wondering how a similar 
solution could run on OpenBSD.


Requirements:
- Load balancing
- Failover
- Throughput (i know we should talk in pps...): 20Mb/s (soon to expect 
50Mb)

- Rock solid solution

Do you think an openBGP/openBSD solution is viable considering those 
requirements ?


Thanks



Laurent,

I invite you to google and read through the misc@ archives, where this 
question has been rehashed a million times. The short answer is yes; 
read the documentation. I, and many others use OpenBSD in [very] 
high-traffic, redundant, and often times complex network environments.


If you read through this *entire* thread, it should answer nearly all of 
your questions with regards to the capabilities of OpenBSD:

http://marc.info/?l=openbsd-miscm=121581561216571w=2
... though any remaining questions have probably already been asked and 
answered before in the archives.


If, after reading all of the documentation you are still not able to or 
confident in your ability to implement or manage an OpenBSD-based 
network infrastructure to support your company's needs there are a 
number of folks that can provide commercial support, many of which 
either lurk on this list or are listed here:

http://www.openbsd.org/support.html

Best regards
-Tico



Re: Create a bootable usb key?

2009-01-10 Thread Stuart Henderson
On 2009-01-10, Guillaume Thouvenin guillaume.thouve...@polymtl.ca wrote:

 Now next step is to have wired network working and so add support to my
 Attansic Technology L1E.

This chip is not yet supported in OpenBSD. N.B. it is not the same
as either Attansic L1 or L2.



lifetime-related problems with isakmpd

2009-01-10 Thread Peder O. Klingenberg
Hello.

I am trying to use an OpenBSD 4.3 box as the terminator of a VPN to a
business partner, but we're having some problems.  From time to time,
my counterparty sees packets with an old SPI.  This coincides with me
seeing packets from my internal network missing trying to hit the
default route out instead of being routed through the VPN, which leads
me to suspect that the VPN tunnel gets torn down at that moment.

We suspect problems related to timing.  We are trying to use 86400
seconds lifetime for phase 1 and 3600 seconds for phase 2.  I have
tried to specify this, both using /etc/ipsec.conf and ipsecctl to
drive isakmpd, and /etc/isakmpd/isakmpd.conf directly, skipping
ipsecctl.

But I still see attribute LIFE_DURATION = 1200 in QUICK_MODE
exchanges and 3600 in ID_PROT exchanges.

What am I missing here?  I'm at my wit's end, all suggestions welcome.
I include the configurations tried, and an exerpt of the isakmpd.pcap
file that shows the problem I'm seeing.  The report generated by
SIGUSR1 shows the same as the tcpdump: lifetimes of 3600 and 1200 secs
for main- and quick-mode, respectively.

If there is any other information I can provide, please tell me.  I
don't know what system my counterparty is using for VPN, but I can
probably find out, if it's relevant.

Also, please Cc me on replies, as I'm not subscribed to the list.

From ipsec.conf:


ike esp from x.x.x.101/32 to y.y.y.0/24 peer z.z.z.1 \
main auth hmac-sha1 enc 3des group modp1024 life 86400 \
quick auth hmac-md5 enc 3des group none life 3600 \
psk ***


From isakmpd.conf (obviously, isakmpd.conf was not present when trying
to use ipsec.conf and ipsecctl):


[General]
Retransmits= 5
Listen-on=  x.x.x.90
Renegotiate-on-HUP= yes

[Phase 1]
z.z.z.1=peer-other

[Phase 2]
Connections=VPN-other

[peer-other]
Phase=  1
Address=z.z.z.1
Configuration=  other-main-mode
Authentication= 

[VPN-other]
Phase=  2
ISAKMP-peer=peer-other
Configuration=  other-quick-mode
Local-ID=   my-internal-net
Remote-ID=  other-subnet

[my-internal-net]
ID-type=IPV4_ADDR_SUBNET
Network=x.x.x.101
Netmask=255.255.255.255

[other-subnet]
ID-type=IPV4_ADDR_SUBNET
Network=y.y.y.0
Netmask=255.255.255.0

[other-main-mode]
EXCHANGE_TYPE=  ID_PROT
Transforms= 3DES-SHA,3DES-MD5
Life=   LIFE_86400_SECS

[other-quick-mode]
EXCHANGE_TYPE=  QUICK_MODE
Suites= QM-ESP-3DES-MD5-SUITE
Life=   LIFE_3600_SECS

[LIFE_86400_SECS]
LIFE_TYPE=  SECONDS
LIFE_DURATION=  86400,60:86400

[LIFE_3600_SECS]
LIFE_TYPE=  SECONDS
LIFE_DURATION=  3600,60:86400


tcpdump of isakmpd.pcap shows (sorry about overlong lines):


23:04:45.330914 x.x.x.90.500  z.z.z.1.500: [udp sum ok] isakmp v1.0 exchange
QUICK_MODE
cookie: 99a52e9f544cf112-9aeaa9d500dd1f88 msgid: 6d8579bb len: 152
payload: HASH len: 24
payload: SA len: 48 DOI: 1(IPSEC) situation: IDENTITY_ONLY
payload: PROPOSAL len: 36 proposal: 1 proto: IPSEC_ESP spisz: 4 
xforms: 1
SPI: 0x58981dda
payload: TRANSFORM len: 24
transform: 1 ID: 3DES
attribute LIFE_TYPE = SECONDS
attribute LIFE_DURATION = 1200
attribute ENCAPSULATION_MODE = TUNNEL
attribute AUTHENTICATION_ALGORITHM = HMAC_MD5
payload: NONCE len: 20
payload: ID len: 16 type: IPV4_ADDR_SUBNET = x.x.x.101/255.255.255.255
payload: ID len: 16 type: IPV4_ADDR_SUBNET = y.y.y.0/255.255.255.0 [ttl 
0]
(id 1, len 180)
23:04:45.543109 z.z.z.1.500  x.x.x.90.500: [udp sum ok] isakmp v1.0 exchange
QUICK_MODE
cookie: 99a52e9f544cf112-9aeaa9d500dd1f88 msgid: 6d8579bb len: 164
payload: HASH len: 24
payload: SA len: 48 DOI: 1(IPSEC) situation: IDENTITY_ONLY
payload: PROPOSAL len: 36 proposal: 1 proto: IPSEC_ESP spisz: 4 
xforms: 1
SPI: 0xeb872e73
payload: TRANSFORM len: 24
transform: 1 ID: 3DES
attribute LIFE_TYPE = SECONDS
attribute LIFE_DURATION = 1200
attribute ENCAPSULATION_MODE = TUNNEL
attribute AUTHENTICATION_ALGORITHM = HMAC_MD5
payload: NONCE len: 24
payload: ID len: 16 type: IPV4_ADDR_SUBNET = x.x.x.101/255.255.255.255
payload: ID len: 16 type: IPV4_ADDR_SUBNET = y.y.y.0/255.255.255.0 [ttl 
0]
(id 1, len 192)
23:04:45.560126 x.x.x.90.500  z.z.z.1.500: [udp sum ok] isakmp v1.0 exchange
QUICK_MODE
cookie: 

Pedido de remoção da lista Novos

2009-01-10 Thread Novidades Acqua Lisboa
  recebemos um pedido de remogco do seu enderego misc@openbsd.org na lista 
Novos. Por favor, clique no seguinte enderego para confirmar que pretende 
anular a sua subscrigco:
http://www.mktid.com/pub/rm.php?dodel=dodelu=2d50b65318l=1491



newbie - migrating - home drive, UIDs, and etc/group, and such

2009-01-10 Thread Jim Barchuk

HiHi All!

I've migrated bunches of drives under RH (yeah since 4.2) but I'm an OBSD 
xtreme-nooobeee. Been reading tons of docs and I think I've got my ducks 
lined up but want to double check with an opinion or two.


Box has 3 drives, boot, home, and backup.

I did the install with just the one boot drive mostly because the 
faq4.html wasn't *absolutely* clear *exactly* how to implement the word 
'possible' in note that it is possible to leave some partitions 
untouched... and I'd rather be 'too safe' than go to the backups. Don't 
get me wrong, the docs are excellent, just a couple of points of unclarity 
like that one.


So after the install I had a few adventures learning about wd** and labels 
and such and now I've got:


#
# /etc/fstab
#
# boot and 'c' and such
/dev/wd2a   /   ffs rw  1 1
/dev/wd2g   /home   ffs rw,nodev,nosuid 1 2
/dev/wd2d   /tmpffs rw,nodev,nosuid 1 2
/dev/wd2f   /usrffs rw,nodev1 2
/dev/wd2e   /varffs rw,nodev,nosuid 1 2
#
# old 500G home drive
/dev/wd1j   /home-b ext2fs  rw,nodev,nosuid 1 2
#
# backup 400G drive
/dev/wd0i   /400ext2fs  rw,nodev,nosuid 1 2

Yep I relabeled the old home to home-b before plugging it it.

So what I think I need to do is:

1) umount home
2) umount home-b

3) relabel home to home-spare
4) relabel home-b to home

5) In fstab change these lines from:

/dev/wd2g   /home
/dev/wd1j   /home-b

to:

/dev/wd2g   /home-spare
/dev/wd1j   /home

6) And mount -av

Sounds good?



Ok now on to the users. BTW this is a small home server thing just a few 
friends with accounts and a buncha services user names total about 40.


Would it be 'better' to migrate /etc/passwd as described in 
http://openbsd.rt.fm/faq/faq9.html#passwd, which I have already built 
files for but not installed, or should I adduser them all from scratch and 
let the system take care of UIDs and groups.


If I migrate, then there's the remote possibility of some incompatibility 
of a user name I miss (lots of editing/checking,) and I have to build the 
group file by hand.


If I recreate users, then it's fully compatible. But I need to chmod the 
whole /home/* to match the new ID numbers, though that's not a big deal by 
script.


OK even as I'm writing that I'm already leaning towards recreate. I'd 
rather be safe and guaranteed compatible than slip and push a wrong button 
and take hours to find out what I screwed up.


Colorful Caveats: If you comment, and you're right, then the check will be 
in the mail on monday morning. But, if you're wrong, you'll be hearing 
from guido *and* my attorney on tuesday afternoon. LOL


TYIA

Have a :) day!

Jim

--
j...@jbarchuk.com -- No that's not back up yet, it's under the /home drive.



Re: newbie - migrating - home drive, UIDs, and etc/group, and such

2009-01-10 Thread Ted Unangst
On Sat, Jan 10, 2009 at 5:27 PM, Jim Barchuk j...@jbarchuk.com wrote:
 /dev/wd1j   /home-b ext2fs  rw,nodev,nosuid 1 2
 /dev/wd0i   /400ext2fs  rw,nodev,nosuid 1 2

 Sounds good?

I would not recommend using ext2fs for long term storage.  It's fine
for migration, but not intended to be a primary store.

 Would it be 'better' to migrate /etc/passwd as described in
 http://openbsd.rt.fm/faq/faq9.html#passwd, which I have already built files
 for but not installed, or should I adduser them all from scratch and let the
 system take care of UIDs and groups.

Certainly, you are less likely to screw anything up by running adduser
a few times compared to trying a bulk update, but then the user IDs
aren't likely to match the ones on disk and fixing that later may pose
trouble (wrong permissions).  But at least the system is always likely
to work.  Messing with master.passwd yourself (by forgetting a  in
, say) is a good way to really break things.



Re: newbie - migrating - home drive, UIDs, and etc/group, and such

2009-01-10 Thread Jim Barchuk

HiHi Ted!


/dev/wd1j   /home-b ext2fs  rw,nodev,nosuid 1 2
/dev/wd0i   /400ext2fs  rw,nodev,nosuid 1 2



I would not recommend using ext2fs for long term storage.  It's fine
for migration, but not intended to be a primary store.


Yep that's in my list of TTD but the more basic drive/partition migration 
comes first.


Would it be 'better' to migrate /etc/passwd as described in 
http://openbsd.rt.fm/faq/faq9.html#passwd, which I have already built 
files for but not installed, or should I adduser them all from scratch 
and let the system take care of UIDs and groups.


Certainly, you are less likely to screw anything up by running adduser a 
few times compared to trying a bulk update, but then the user IDs aren't 
likely to match the ones on disk and fixing that later may pose trouble 
(wrong permissions).


Sure they definitely won't match. What I meant was:

If I recreate users, then it's fully compatible. But I need to chmod 
the whole /home/* to match the new ID numbers, though that's not a big 
deal by script.


From the new passwd file I can extract all the names, IDs, and /home 
paths, and edit that down to a script with a ton of chown -R (not chmod as 
I said above.)


TY Have a :) day!

Jim

--
j...@jbarchuk.com



Re: newbie - migrating - home drive, UIDs, and etc/group, and such

2009-01-10 Thread Vadim Zhukov
On 11 January 2009 c. 06:46:59 Ted Unangst wrote:
 On Sat, Jan 10, 2009 at 5:27 PM, Jim Barchuk j...@jbarchuk.com wrote:
  /dev/wd1j   /home-b ext2fs  rw,nodev,nosuid 1 2
  /dev/wd0i   /400ext2fs  rw,nodev,nosuid 1 2
 
  Sounds good?

 I would not recommend using ext2fs for long term storage.  It's fine
 for migration, but not intended to be a primary store.

  Would it be 'better' to migrate /etc/passwd as described in
  http://openbsd.rt.fm/faq/faq9.html#passwd, which I have already
  built files for but not installed, or should I adduser them all from
  scratch and let the system take care of UIDs and groups.

 Certainly, you are less likely to screw anything up by running adduser
 a few times compared to trying a bulk update, but then the user IDs
 aren't likely to match the ones on disk and fixing that later may pose
 trouble (wrong permissions).  But at least the system is always likely
 to work.  Messing with master.passwd yourself (by forgetting a  in

You can specify exact UIDs for each user you create with adduser.
Problems start to arrive only when existing (old) UIDs or GIDs interfere
with (new) system ones. And even in this case something like this will
do the job:

 set -e
 cd /home
 for U in alex joe paul; do
   set -- `ls -nld $U`
   OLDUID=$3
   OLDGID=$4
   groupadd $U
   useradd $U
   NEWUID=`id -u $U`
   NEWGID=`id -g $U`
   find $U -user $OLDUID -print0 | xargs -0r chown $NEWUID
   find $U -group $OLDGID -print0 | xargs -0r chown $NEWGID
 done

--
  Best wishes,
Vadim Zhukov