Re: EMCsq/SAN

2003-09-16 Thread Danny Braniss
On Mon, 15 Sep 2003, Kip Macy wrote: We have FreeBSD machines connected to EMC 8830 working fine! Leal what FC hardware are you using/recommend? btw, is this an i86? thanks, danny Date: Mon, 15 Sep 2003 08:48:46 -0700 (PDT) From: Kip Macy [EMAIL PROTECTED] To: Danny

Re: Machine wedges solid after one serial-port source-line addition...

2003-09-16 Thread Terry Lambert
Barry Bouwsma wrote: Would anyone care to explain why the following simple patch could be enough to wedge my machine solid? (My original hack-patches without any console printf() debuggery did the same thing within seconds, as well...) All it does is notify the console whenever a serial port

Re: My jail can not ssh..

2003-09-16 Thread Matthew Seaman
On Tue, Sep 16, 2003 at 04:16:31AM +0800, maillist bsd wrote: I am just testing jail on my FreeBSD4.8-stable box, i found i can not ssh to the jail environment, but i can telnet to jail environment, the sshd is running both inside and outside jail. What's the problem. This is [EMAIL

Re: My jail can not ssh..

2003-09-16 Thread Pat Lashley
--On Tuesday, September 16, 2003 09:07:15 +0100 Matthew Seaman [EMAIL PROTECTED] wrote: On Tue, Sep 16, 2003 at 04:16:31AM +0800, maillist bsd wrote: I am just testing jail on my FreeBSD4.8-stable box, i found i can not ssh to the jail environment, but i can telnet to jail environment, the sshd

Does anyone work on making ATA moduler?

2003-09-16 Thread Takanori Watanabe
Hi,There is a problem when PCMCIA related stuff is used as module, ATA CF is not recognized. This is because PCMCIA atachment is not compiled when pccard(4) is not compiled in. To fix it, we have to supply PCMCIA attachment in any form. One way is to make a kernel module that contains only

Re: Does anyone work on making ATA moduler?

2003-09-16 Thread Norikatsu Shigemura
On Wed, 17 Sep 2003 00:43:19 +0900 Takanori Watanabe [EMAIL PROTECTED] wrote: Hi,There is a problem when PCMCIA related stuff is used as module, ATA CF is not recognized. This is because PCMCIA atachment is not compiled when pccard(4) is not compiled in. To fix it, we have to supply PCMCIA

Re: Does anyone work on making ATA moduler?

2003-09-16 Thread Soren Schmidt
It seems Takanori Watanabe wrote: Hi,There is a problem when PCMCIA related stuff is used as module, ATA CF is not recognized. This is because PCMCIA atachment is not compiled when pccard(4) is not compiled in. To fix it, we have to supply PCMCIA attachment in any form. One way is to

Mirror Plex (Raid 1) after installing FreeBSD

2003-09-16 Thread Murat USTUNTAS
Hello, I read documents on Vinum for FreeBSD. But, some points exculed.. I want to find some points on Vinum.. If I have identical 2 disks (Samsung SP6300 Series),suppose, I want to install the FreeBSD on one of them 60 Gb. After installing the FreeBSD , I want to run vinum with mirroring with

Re: Mirror Plex (Raid 1) after installing FreeBSD

2003-09-16 Thread Peter Pentchev
On Tue, Sep 16, 2003 at 07:08:13PM +0300, Murat USTUNTAS wrote: Hello, I read documents on Vinum for FreeBSD. But, some points exculed.. I want to find some points on Vinum.. If I have identical 2 disks (Samsung SP6300 Series),suppose, I want to install the FreeBSD on one of them 60 Gb.

Re: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread Michael Edenfield
* William Michael Grim [EMAIL PROTECTED] [030916 14:46]: What the hell are you talking about? Thanks for not giving us any info about your problem. I suspect he means: http://www.securityfocus.com/archive/1/337662/2003-09-13/2003-09-19/0 --Mike

RE: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread Don Bowman
From: Josh Brooks [mailto:[EMAIL PROTECTED] 1. What is the workaround for this issue ? Be creative. Not everyone can update their userland in a normal fashion - and no, I won't sit here and justify that statement. Think embedded systems. 2. Is there really an exploit in the wild ?

Re: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread David Raistrick
On Tue, 16 Sep 2003, William Michael Grim wrote: What the hell are you talking about? Thanks for not giving us any info about your problem. He appears to have made a basic assumption that the readers of -hackers would subscribe to security-advisories as well. FreeBSD Security Advisory

Re: 4.8-stable kernel panic

2003-09-16 Thread sysadmin
Do you use any klds? What does kldstat say? No klds loaded. Well, it looks like the dc net driver is causing the panic. After some testing, I got this backtrace: --- #0 dumpsys () at ../../kern/kern_shutdown.c:487 #1 0xc0168237 in boot (howto=256) at ../../kern/kern_shutdown.c:316 #2

Re: 4.8-stable kernel panic

2003-09-16 Thread Martin Blapp
Hi, #0 dumpsys () at ../../kern/kern_shutdown.c:487 #1 0xc0168237 in boot (howto=256) at ../../kern/kern_shutdown.c:316 #2 0xc0168675 in panic (fmt=0xc02db260 m_copydata, offset size of mbuf chain) at ../../kern/kern_shutdown.c:595 #3 0xc018576e in m_copydata (m=0xc1560d00, off=6144,

Re: 4.8-stable kernel panic

2003-09-16 Thread sysadmin
Hi, #0 dumpsys () at ../../kern/kern_shutdown.c:487 #1 0xc0168237 in boot (howto=256) at ../../kern/kern_shutdown.c:316 #2 0xc0168675 in panic (fmt=0xc02db260 m_copydata, offset size of mbuf chain) at ../../kern/kern_shutdown.c:595 #3 0xc018576e in m_copydata (m=0xc1560d00, off=6144,

Re: 4.8-stable kernel panic

2003-09-16 Thread Martin Blapp
Hi, #!/bin/bash while :; do ping -f -s 65467 ip_addr done So probably mbuf exhaustion. Here's the NIC info: [EMAIL PROTECTED]:9:0: class=0x02 card=0x00ed16ec chip=0x12161113 rev=0x11 hdr=0x00 vendor = 'Accton Technology Corporation' device = 'EN5251-Based Fast

Re: 4.8-stable kernel panic (fwd)

2003-09-16 Thread Martin Blapp
From: David Rhodus [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: Martin Blapp [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: 4.8-stable kernel panic Yes, I don't think this email will make it to hackers@ because all the email from my office gets drop because freebsd.org''s

Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Clifton Royston
For those who don't know what I'm talking about, try executing host thisdomainhasneverexistedandneverwill.com, or any other domain you'd care to make up in .com or .net. Verisign has abused the trust placed in them to operate a root name server, by creating wildcard A records directly under

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Dan Langille
On 16 Sep 2003 at 10:23, Clifton Royston wrote: In the meantime I'm trying to figure out if there's some simple hack to disregard these wildcard A records, short of requesting zone transfers of the root nameservers (e.g. via peering with f.root-servers.net) and purging those records out of

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Garance A Drosihn
At 10:23 AM -1000 9/16/03, Clifton Royston wrote: In the meantime I'm trying to figure out if there's some simple hack to disregard these wildcard A records, short of requesting zone transfers of the root nameservers (e.g. via peering with f.root-servers.net) and purging those records out of the

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread David Raistrick
On Tue, 16 Sep 2003, Clifton Royston wrote: In the meantime I'm trying to figure out if there's some simple hack to disregard these wildcard A records, short of requesting zone transfers of the root nameservers (e.g. via peering with f.root-servers.net) and purging those records out of the

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Michael Edenfield
* Dan Langille [EMAIL PROTECTED] [030916 16:46]: On 16 Sep 2003 at 10:23, Clifton Royston wrote: In the meantime I'm trying to figure out if there's some simple hack to disregard these wildcard A records, short of requesting zone transfers of the root nameservers (e.g. via peering with

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread John Polstra
On 16-Sep-2003 Dan Langille wrote: On 16 Sep 2003 at 10:23, Clifton Royston wrote: In the meantime I'm trying to figure out if there's some simple hack to disregard these wildcard A records, short of requesting zone transfers of the root nameservers (e.g. via peering with

Re: FreeBSD on Intel Server Board SE7501WV2

2003-09-16 Thread David Raistrick
On Fri, 12 Sep 2003, Aaron Wohl wrote: We have two systems with this motherboard. Id recommend looking for a different motherboard. If you find one in the same class let me know what you find Im looking too for our next set of servers. Aaron, I just ordered a supermicro X5DP8 board (and

Re: How to use usb storage in Freebsd?

2003-09-16 Thread Peter Jeremy
On 2003-Sep-14 18:54:40 +, Zane Long Quentine [EMAIL PROTECTED] wrote: the version of FreeBSD is 4.8 use the dmesg, I found some related information about my usb strorage --begin here umass0: Digital , Inc. TGE UFD MP3 Player., rev 1.10/0.01, addr 2 umass0: Get Max Lun not supported (IOERROR)

tty layer and lbolt sleeps

2003-09-16 Thread Mike Durian
I'm trying to implement a serial protocol that is timing sensitive. I'm noticing things like drains and reads and blocking until the next kernel tick. I believe this is due to the lbolt sleeps in the tty.c code. It looks like I can avoid these sleeps if isbackground() returns false, however I

Re: usb devices

2003-09-16 Thread M. Warner Losh
In message: [EMAIL PROTECTED] Soeren Straarup [EMAIL PROTECTED] writes: : Can there be more than one 'vendor SOMETHING 0x0001 Desc' with different : SOMETHING and Desc in src/sys/dev/usb/usbdevs ? Of course. That's the whole point of having a vendor space that's assigned by a central

sshd dieing? after applying FreeBSD-SA-03:12.openssh

2003-09-16 Thread Steven Hartland
OpenSSH_3.6.1p1 FreeBSD-20030916, SSH protocols 1.5/2.0, OpenSSL 0x0090701f debug1: Reading configuration data /etc/ssh/ssh_config debug1: Rhosts Authentication disabled, originating port will not be trusted. debug1: Connecting to 10.10.1.23 [10.10.1.23] port 22. debug1: Connection established

Re: Does anyone work on making ATA moduler?

2003-09-16 Thread M. Warner Losh
In message: [EMAIL PROTECTED] Takanori Watanabe [EMAIL PROTECTED] writes: : Hi,There is a problem when PCMCIA related stuff : is used as module, ATA CF is not recognized. : : This is because PCMCIA atachment is not compiled : when pccard(4) is not compiled in. : : To fix it, we have

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread M. Warner Losh
I think we should put a filter for this nonsense into the base system. Hack the resolve to filter out the adddress, and hack bind to filter it out too. that way we can leverage our position in the name servers in the world to do something about this BS. Warner

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread John Polstra
On 16-Sep-2003 M. Warner Losh wrote: I think we should put a filter for this nonsense into the base system. Hack the resolve to filter out the adddress, and hack bind to filter it out too. that way we can leverage our position in the name servers in the world to do something about this BS.

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread M. Warner Losh
In message: [EMAIL PROTECTED] John Polstra [EMAIL PROTECTED] writes: : On 16-Sep-2003 M. Warner Losh wrote: : I think we should put a filter for this nonsense into the base : system. Hack the resolve to filter out the adddress, and hack bind to : filter it out too. that way we can

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Michael Edenfield
* M. Warner Losh [EMAIL PROTECTED] [030916 20:12]: I think we should put a filter for this nonsense into the base system. Hack the resolve to filter out the adddress, and hack bind to filter it out too. that way we can leverage our position in the name servers in the world to do something

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Michael Edenfield
* John Polstra [EMAIL PROTECTED] [030916 20:14]: On 16-Sep-2003 M. Warner Losh wrote: I think we should put a filter for this nonsense into the base system. Hack the resolve to filter out the adddress, and hack bind to filter it out too. that way we can leverage our position in the name

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Clifton Royston
. It's just that it was a noise-level problem until it affected .com and .net) The ISC has announced it expects to have a patch by Wednesday. That's better than I'd hoped. Thanks for all the feedback I've got, BTW. http://apnews.excite.com/article/20030916/D7TJOF3G0.html -- Clifton

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Michael Edenfield
position in the name servers in the world to do something about this BS. ISC claims they'll have a patch ready for the stock BIND sometime in the next few days for this. All we need to do is import it :) In particular, see: http://apnews.excite.com/article/20030916/D7TJOF3G0.html Though

[PATCH] : libc_r/uthread/uthread_write.c

2003-09-16 Thread Dan Langille
I've had preliminary success with this patch. More testing needs to be done, but in the meantime, I would appreciate reviews and comments. The patched code is available from http://beta.freebsddiary.org/tmp/uthread_write.c and the patch appears below. In short, the logic has been changed to

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Seth Kingsley
On Tue, Sep 16, 2003 at 06:04:17PM -0600, M. Warner Losh wrote: Agreed. but it wouldn't be too hard to determine at boot/hourly doing a bogus query to find the address of the moment. Even they would be hard pressed to change things more than hourly. In the document VeriSign distributes on

Re: [PATCH] : libc_r/uthread/uthread_write.c

2003-09-16 Thread Daniel Eischen
On Tue, 16 Sep 2003, Dan Langille wrote: I've had preliminary success with this patch. More testing needs to be done, but in the meantime, I would appreciate reviews and comments. The patched code is available from http://beta.freebsddiary.org/tmp/uthread_write.c and the patch appears

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Lev Walkin
M. Warner Losh wrote: In message: [EMAIL PROTECTED] John Polstra [EMAIL PROTECTED] writes: : On 16-Sep-2003 M. Warner Losh wrote: : I think we should put a filter for this nonsense into the base : system. Hack the resolve to filter out the adddress, and hack bind to : filter it out

Re: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread Brandon D. Valentine
On Tue, Sep 16, 2003 at 01:45:42PM -0500, William Michael Grim wrote: What the hell are you talking about? Thanks for not giving us any info about your problem. I think he was assuming that we were all aware of the OpenSSH exploit that was just announced. Mr. Brooks would do well to read

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Michael Edenfield
* Clifton Royston [EMAIL PROTECTED] [030916 20:22]: I found most of the discussion seems to be going on on NANOG. (Apparently they're not the first, BTW; some CC TLDs have been doing it for a while, as have some of the new TLDs like .museum. It's just that it was a noise-level problem

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread John Polstra
On 17-Sep-2003 M. Warner Losh wrote: In message: [EMAIL PROTECTED] John Polstra [EMAIL PROTECTED] writes: : On 16-Sep-2003 M. Warner Losh wrote: : I think we should put a filter for this nonsense into the base : system. Hack the resolve to filter out the adddress, and hack bind to

pppoe - nmap - No buffer space available

2003-09-16 Thread pilax
Hi all I've got a pppoe gateway with freebsd 5.1-release and two nics : a lan nic (RFC 1918) and a pppoe nic. (the same thing append with a 4.7-release...and older versions of nmap) When I launch nmap to test a machine on the inside : fine ! But when I launch nmap to test a machine on the

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread Michael Edenfield
* John Polstra [EMAIL PROTECTED] [030916 21:27]: True, we could probably do it. I guess we'd have to generate a few random and unlikely queries, try them, and see if all/most of them resolve to the same address. Or maybe the to the same small set of addresses, depending on how determined

Re: Any workarounds for Verisign .com/.net highjacking?

2003-09-16 Thread John Polstra
On 17-Sep-2003 Michael Edenfield wrote: * John Polstra [EMAIL PROTECTED] [030916 21:27]: True, we could probably do it. I guess we'd have to generate a few random and unlikely queries, try them, and see if all/most of them resolve to the same address. Or maybe the to the same small set of