Re: libc and BitTorrent

2005-06-17 Thread -f
hmm, on Thu, Jun 16, 2005 at 05:12:32PM +0200, Artur Grabowski said that -f [EMAIL PROTECTED] writes: hi there, i was looking at BitTorrent, and this caught my attention: --enable_bad_libc_workaround arg enable workaround for a bug in BSD libc that makes file reads very

Re: my may/june trip to canada

2005-06-17 Thread Hannah Schroeter
Hello! On Thu, Jun 16, 2005 at 08:57:31PM +0200, Henning Brauer wrote: [...] I have been flying to Montreal on May 7th, basically just after my return from RIPE-50 at Stockholm. Matt (msf) picked me up downtown, and Ryan arrived a few hours later, bringing Fernando Gont with him. We stayed at

Re: my may/june trip to canada

2005-06-17 Thread reyk
On Thu, Jun 16, 2005 at 08:57:31PM +0200, Henning Brauer wrote: So, I am in the airplane flying back from Vancouver. It has been a long journey, but let me start from the beginning. [...] eh, you didn't see me, henning? ;-) reyk --- h.txt 2005-06-17 11:32:20.0 +0200 +++

Re: interface groups and pf

2005-06-17 Thread Isak Lyberth
where do one get the the 1 litre stella bottle? /Isak tony sarendal wrote: pf is the best thing since the 1-litre stella bottle. It's good to see that it continues to improve. This is cool stuff. /Tony S

Re: GRUB's boot parameter -- I dit it!!!

2005-06-17 Thread ikesan
On Thu, 16 Jun 2005 18:39:37 +0200 Matthias Kilian [EMAIL PROTECTED] wrote: On Fri, Jun 17, 2005 at 01:12:59AM +0900, ikesan wrote: root (hd2,0,a) kernel --type=netbsd /bsd Use the chainloader. I dit it!! I changed grub's parameter as following. root (hd2,0,a)#- not

Re: interface groups and pf

2005-06-17 Thread Alexey E. Suslikov
Henning Brauer wrote: So, after cleaning up the interface abstraction code in pf with Ryan before the Hackathon, I worked on interface groups integration to pf. ... joining to others: great work. So for now isakmpd have not need to listen on the routing socket by itself to be truly dynamic

Re: openbsd - opensource as free at all

2005-06-17 Thread Marc Espie
People really interested in FREE software do their homework, they read mailing-lists archives, and they refer to the project website, which has a BIG page explaining in details what this is all about. Goodbye, come back when you have relevant new questions.

OBSD user groups in South Africa?

2005-06-17 Thread Marius Van Deventer - Umzimkulu
Hi all. I googled but found nothing, so now I'm hoping you good folks can help me. Does anyone know of an OpenBSD (or General BSD) users group in South Africa? Thanks. Marius.

Re: GRUB's boot parameter - don't do it!!!!

2005-06-17 Thread Vladislav Belogrudov
I think using grub is shameful and insecure enough :) I would not rely on boot loader that resides outside of MBR. The best thing for multi-os pc is distro-independent loader (e.g. GAG) + partion loaders for each specific OS. Don't want my OpenBSD to depend on Linux partitions :) My personal

Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Hello all, Not sure if I'm missing something here with spamd so I thought I'd ask the experts. I have it setup with the default config file (snipped) ; [fw1]# cat /etc/spamd.conf all:\ :spamhaus:china:korea: # Mirrored from http://spfilter.openrbl.org/data/sbl/SBL.cidr.bz2

Re: GRUB's boot parameter - don't do it!!!!

2005-06-17 Thread reyk
On Fri, Jun 17, 2005 at 04:40:03AM -0700, Vladislav Belogrudov wrote: I think using grub is shameful and insecure enough :) I would not rely on boot loader that resides outside of MBR. The best thing for multi-os pc is distro-independent loader (e.g. GAG) + partion loaders for each specific

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Otto Moerbeek
On Fri, 17 Jun 2005, Brian McKerr wrote: I also have the relevant pf rule in place; [firewall]# pfctl -vsn rdr inet proto tcp from spamd to any port = smtp - 127.0.0.1 port 8025 [ Evaluations: 104628Packets: 0 Bytes: 0 States: 0 ] [ Inserted: uid 0 pid 25445 ] i'm

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Otto Moerbeek wrote: On Fri, 17 Jun 2005, Brian McKerr wrote: I also have the relevant pf rule in place; [firewall]# pfctl -vsn rdr inet proto tcp from spamd to any port = smtp - 127.0.0.1 port 8025 [ Evaluations: 104628Packets: 0 Bytes: 0 States: 0 ] [ Inserted: uid

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Steve Tornio
FEATURE(`dnsbl',`relays.ordb.org', `Rejected - see http://ordb.org/')dnl FEATURE(`dnsbl',`sbl-xbl.spamhaus.org',`Rejected - see http://spamhaus.org/')dnl Jun 17 19:49:29 inetmail sendmail[13126]: ruleset=check_relay, arg1=[210.213.176.247], arg2=127.0.0.4, relay=210.213.176.247.pldt.net

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Otto Moerbeek
On Fri, 17 Jun 2005, Brian McKerr wrote: You mean a basic SMTP pass in ? This has been allowing mail to the mailserver for years, its only this week that I tried the Spamd thingo pfctl -sr | grep -i smtp pass in log quick on fxp0 proto tcp from any to any port = smtp flags S/SA

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Otto Moerbeek wrote: On Fri, 17 Jun 2005, Brian McKerr wrote: You mean a basic SMTP pass in ? This has been allowing mail to the mailserver for years, its only this week that I tried the Spamd thingo pfctl -sr | grep -i smtp pass in log quick on fxp0 proto tcp from any to any port =

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Steve Tornio wrote: FEATURE(`dnsbl',`relays.ordb.org', `Rejected - see http://ordb.org/')dnl FEATURE(`dnsbl',`sbl-xbl.spamhaus.org',`Rejected - see http://spamhaus.org/')dnl Jun 17 19:49:29 inetmail sendmail[13126]: ruleset=check_relay, arg1=[210.213.176.247], arg2=127.0.0.4,

Suspending on Zaurus

2005-06-17 Thread Ray
Hi, Suspending the Zaurus seems to freeze the screen (typed text doesn't show up, but oddly switching consoles works) until I suspend and resume the Zaurus a second time, at which point the typed text mysteriously appears. I have also tried the close cover, open cover trick to see if it's

the pf-based dynamic firewall daemon dfd_keeper now available

2005-06-17 Thread Travis H.
Hi, I've spent a fair amount of time minimizing open ports and I have a cool new program for other people allergic to unnecessary open ports. The basic idea is called a dynamic firewall daemon, that provides a command-line like interface which can execute carefully controlled modification to your

Re: speed of mac mini

2005-06-17 Thread Thorsten Johannvorderbrueggen
Hello list, i will only do normal thinks:- some coding -- emacs/terminals/ddd - read www.openbsd.org -- firefox/dillo -read mails of misc@openbsd.org -- thunderbird

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Steve Tornio wrote: Because those addresses are in the XBL, not the SBL. The XBL is populated by entries from the CBL, which are added when virus-like or worm-like behavior is detected, and entries are removed at the first request. Doesn't really make a whole lot of sense to try to create a

Re: ftp server down?

2005-06-17 Thread Bob Beck
Hi gang, major outage here that is affecting ftp.openbsd.org I love embedded disk products with firmware that crashes. Thank you adaptec. We'll be back when we are back, sorry for the inconvenience. -Bob

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Andre Lucas
Hi, I,m a newbie for using openbsd But why not use spamd for the tarpitting and use a mail proxy for the blacklisting feature works fine for me. Spam dropped from 30 a day to 1 or 2 a day Andre -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve

Re: SATA

2005-06-17 Thread Jurjen Oskam
On Thu, Jun 16, 2005 at 10:10:18AM -0500, L. V. Lammert wrote: [ASUS boards with VIA chipsets] The only problem I have found is the sk0 driver appears to be unstable in some installations, requiring a separate NIC (could have be related to GB on 100BaseT, but it wasn't worth the time

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread J. Lievisse Adriaanse
Darnforget the link (again): http://www.forbes.com/intelligentinfrastructure/2005/06/16/linux-bsd-unix-cz_dl_0616theo.html -- checking whether you're still watching...probaly not :-) /usr/ports/x11/wmx configure script.

Re: SATA

2005-06-17 Thread Brad
On Fri, Jun 17, 2005 at 04:33:45PM +0200, Jurjen Oskam wrote: On Thu, Jun 16, 2005 at 10:10:18AM -0500, L. V. Lammert wrote: [ASUS boards with VIA chipsets] The only problem I have found is the sk0 driver appears to be unstable in some installations, requiring a separate NIC (could

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Stephen Marley
On Fri, Jun 17, 2005 at 04:48:31PM +0200, J. Lievisse Adriaanse wrote: Theo gave an interview to Forbes Magazine, in which he stated: It's terrible, De Raadt says. Everyone is using it, and they don't realize how bad it is. And the Linux people will just stick with it and add to it rather than

Effectiveness of pf against port scans

2005-06-17 Thread Daniel Hamlin
Kudos to the PF developers. Here is an interesting metric from a production /16 network, running OpenBSD 3.6: 96% of blatant TCP port-scan related traffic stopped by pf's max-src-state feature. After tuning pf's max-src-states for our environment and normal traffic loads, we measured how

Re: OSPFd over IPSEC (enc)?

2005-06-17 Thread Stephen Marley
On Thu, Jun 16, 2005 at 12:51:53PM -0700, Michael Favinsky wrote: Can two 3.7 servers running OSPFd talk OSPF to each other over an IPSEC tunnel, or worded in another way, an enc interface? I have two sites with a WAN link and I want to use the Internet (VPN) as a backup route. The concept

Re: Carp and Single ADSL

2005-06-17 Thread Stephen Marley
On Fri, Jun 17, 2005 at 10:13:21PM +1000, Brian McKerr wrote: Hello, I've just purchased 2 shiny new firewall boxes that I plan to have running with CARP. I've read the man pages and Ryan McBrides documentation and it all seems fairly straightforward, the hard part for me seems to be

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Vladislav Belogrudov
100% right words! --- Dissapointed Linux user/admin/developer since 1998 --- J. Lievisse Adriaanse [EMAIL PROTECTED] wrote: Theo gave an interview to Forbes Magazine, in which he stated: It's terrible, De Raadt says. Everyone is using it, and they don't realize how bad it is. And the

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Theo de Raadt
On Fri, Jun 17, 2005 at 04:48:31PM +0200, J. Lievisse Adriaanse wrote: Theo gave an interview to Forbes Magazine, in which he stated: It's terrible, De Raadt says. Everyone is using it, and they don't realize how bad it is. And the Linux people will just stick with it and add to it rather

apm problems on dell inspiron 8000

2005-06-17 Thread Rick Pettit
I just loaded a recent 3.7 snapshot and now I seem to be having APM issues. Not long ago I was running a 3.6 snapshot and didn't have problems with a sudo reboot or a sudo shutdown -h -p now. I was also able to unplug A/C power without locking up the machine. Now, when I perform a sudo reboot or

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread J. Lievisse Adriaanse
Not everybody there is happy about Theo's words...oh well, what gives ;-) Jasper On Fri, 17 Jun 2005 16:25:56 +0100 Stephen Marley [EMAIL PROTECTED] wrote: On Fri, Jun 17, 2005 at 04:48:31PM +0200, J. Lievisse Adriaanse wrote: Theo gave an interview to Forbes Magazine, in which he stated:

VPN Remote Services Connetivity

2005-06-17 Thread dontek
I have just configured a VPN tunnel between two OpenBSD firewalls / gateways following the VPN man page nearly word-for-word. All is working well... mostly: On either end, on machines behind the firewall, I can connect to any service on any machine on the remote end. However, if I am on the the

Re: perl -MCPAN checksum mismatch on anything

2005-06-17 Thread Uwe Dippel
On Thu, 16 Jun 2005 21:42:39 +0200, Cudeso MailList wrote: I noticed that CPAN used lynx to download the sources. This seemed weird to me so I've reconfigured CPAN so that it no longer uses 'lynx' (entered NONE when asked for 'where is lynx'). Why should lynx not download properly ? CPAN

Re: S-Video TV Hookup

2005-06-17 Thread Gregory Steuck
Jacob == Jacob Meuser [EMAIL PROTECTED] writes: Jacob I would say check out gatos.sourceforge.net, but it looks Jacob like you need a Linux kernel module :( Jacob this is interesting to me though, and it would be a fun Jacob challenge to bring this functionality to OpenBSD. I

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Steven Day
I love this part You know what I found? Right in the kernel, in the heart of the operating system, I found a developer's comment that said, 'Does this belong here?' Lok says. What kind of confidence does that inspire? Right then I knew it was time to switch. On 6/17/05, J. Lievisse Adriaanse

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Abraham Al-Saleh
I'm actually curious as to the apparent change of stance between interviews. In the last two interviews I've read, you've made it clear that you've never used it, and had no comment. Am I missing something? Just curious. On 6/17/05, Theo de Raadt [EMAIL PROTECTED] wrote: On Fri, Jun 17, 2005

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread J. Lievisse Adriaanse
On Fri, 17 Jun 2005 10:13:37 -0600 Theo de Raadt [EMAIL PROTECTED] wrote: On Fri, Jun 17, 2005 at 04:48:31PM +0200, J. Lievisse Adriaanse wrote: Theo gave an interview to Forbes Magazine, in which he stated: It's terrible, De Raadt says. Everyone is using it, and they don't realize how

Re: apm problems on dell inspiron 8000

2005-06-17 Thread Diego Augusto Dalmolin
Hi! I4m with the same problem.. but in a cel2.7+asus mainboard (cheap desktop used as gateway server) If you corrected this.. could you tell me how? :-) On 6/17/05, Rick Pettit [EMAIL PROTECTED] wrote: I just loaded a recent 3.7 snapshot and now I seem to be having APM issues. Not long ago I

ami(4) in .au

2005-06-17 Thread Marco Peereboom
We need an ami(4) board + drives in Australia for a developer. He needs something along the PERC 3/4 lines or a SATA/PATA board. If you are interested in donating please let me know and we'll work out the details. If you want to order something of ebay let me know so that people are not bidding

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Steven Day
Just to guess. In most of the article Linux was being criticized from a code standpoint, both in the design and the system they use to develop. On 6/17/05, Abraham Al-Saleh [EMAIL PROTECTED] wrote: I'm actually curious as to the apparent change of stance between interviews. In the last two

Re: apm problems on dell inspiron 8000

2005-06-17 Thread Alexander Yurchenko
On Fri, Jun 17, 2005 at 11:15:28AM -0500, Rick Pettit wrote: I just loaded a recent 3.7 snapshot and now I seem to be having APM issues. please try -current. Not long ago I was running a 3.6 snapshot and didn't have problems with a sudo reboot or a sudo shutdown -h -p now. I was also able

Re: VPN Remote Services Connetivity

2005-06-17 Thread Stephen Marley
On Fri, Jun 17, 2005 at 11:29:03AM -0500, dontek wrote: I have just configured a VPN tunnel between two OpenBSD firewalls / gateways following the VPN man page nearly word-for-word. All is working well... mostly: On either end, on machines behind the firewall, I can connect to any service

Re: perl -MCPAN checksum mismatch on anything

2005-06-17 Thread SRH-Lists
Checksum mismatch for distribution file. Please investigate. I had a similar problem on a fresh 3.7 I noticed that CPAN used lynx to download the sources. This seemed weird to me so I've reconfigured CPAN so that it no longer uses 'lynx' (entered NONE when asked for 'where is

phpbb

2005-06-17 Thread Bryan Irvine
Anybody successfully using phpbb with php, and mysql installed from packages, and using the default chroot mode of apache? I don't want to break the chroot but that's the only way phpbb can see the db. I'm running 3.7. --Bryan

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Stephen Marley
On Fri, Jun 17, 2005 at 10:42:36AM -0600, Abraham Al-Saleh wrote: I'm actually curious as to the apparent change of stance between interviews. In the last two interviews I've read, you've made it clear that you've never used it, and had no comment. Am I missing something? Just curious. You

Re: VPN Remote Services Connetivity

2005-06-17 Thread tony sarendal
On 17/06/05, Stephen Marley [EMAIL PROTECTED] wrote: On Fri, Jun 17, 2005 at 11:29:03AM -0500, dontek wrote: I have just configured a VPN tunnel between two OpenBSD firewalls / gateways following the VPN man page nearly word-for-word. All is working well... mostly: On either end, on

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Otto Moerbeek
On Fri, 17 Jun 2005, Otto Moerbeek wrote: This looks ok. I suggest you setup a local blacklist with an IP you can use to connect to the mail machine. After that, use nc mailserver 25 from that IP to connect to the machine and you'll see what is going on. While playing with this myself, I

Re: phpbb

2005-06-17 Thread Matthew S Elmore
This question has been beaten to death. (I was the one of the ones doing the beating). Search the archives. It involves putting the mysql socket inside the chroot or forcing whatever software you are using to connect over the TCP socket. (Hint: You need a file /etc/my.cnf) Bryan Irvine

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Brian
I thought the interview was good. It just didn't read like an interview like the one linked to from undeadly. I used linux a year before moving over to openBSD, and the two are night and day. openBSD is well organized with very good code. linux is a disaster to navigate (horrible man pages and

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Jasper Lievisse Adriaanse
Right, since there is still a big difference between reading the source code and actually using the system. Jasper On Fri, Jun 17, 2005 at 10:42:36AM -0600, Abraham Al-Saleh wrote: I'm actually curious as to the apparent change of stance between interviews. In the last two interviews I've

Re: speed of mac mini

2005-06-17 Thread brian pink
I haven't set X up yet, but I finally got 3.7 installed on the Mac mini without issue. I was using MBR for the disk instead of HFS, and there's an issue with the disklabel initial setup. The fix is outlined in this message: http://www.monkey.org/openbsd/archive/misc/0309/msg01319.html and I'll

Re: VPN Remote Services Connetivity

2005-06-17 Thread Stephen Marley
On Fri, Jun 17, 2005 at 02:17:08PM -0500, dontek wrote: Actually, I am just doing a vanilla ping, no source address option. When you say flows, do you mean pf flows (rules)? IPSec flows. Sort of like routes. Read vpn(8) again and see netstat -rnfencap for flows and netstat -rnfinet for normal

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Richard Welty
On Fri, 17 Jun 2005 18:23:51 +0200 J. Lievisse Adriaanse [EMAIL PROTECTED] wrote: Not everybody there is happy about Theo's words...oh well, what gives ;-) well, on the one hand, i largely agree with Theo, but on the other hand, Dan Lyons of Forbes has been on an anti-open source kick for some

Re: Problems with wi0 as hostap

2005-06-17 Thread jweber
[EMAIL PROTECTED] wrote: I'm running a Netgear MA311 in hostap-mode on OpenBSD 3.7. wi0 at pci0 dev 10 function 0 Intersil PRISM2.5 rev 0x01: irq 12 wi0: PRISM2.5 ISL3874A(Mini-PCI), Firmware 1.1.1 (primary), 1.8.2 (station) wi0: init failed wi0: failed to allocate 1594 bytes on NIC wi0:

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Tony
Correctness is difficult. Actually, security is the easier part. (and it's easier to keep score;) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of chefren Sent: Friday, June 17, 2005 6:17 PM To: misc@openbsd.org Subject: Re: Theo gave an interview to Forbes

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Sparc Urani
based on my experience, Linux is not a good start for the beginners. for tough systems/network admins its bad. learning unix shall always start with OpenBSD as they can see the difference when try using Linux as their alternative OS. that was a very nice interview. Theo might encourage some other

echi after suspend on IBM X40

2005-06-17 Thread David Cathcart
On my IBM x40 when I connect a usb2 (hi-speed) device (umass(4)) after a clean boot it attaches to ehci(4) and operates at usb2 hi-speed's. But after the first suspend-to-disk (Fn+F12) (and all subsequent suspends/suspend to disk's) it attaches to uhci(4) and operates at usb 1 speeds. This can be

Re: PPPoE Download Performance Woes

2005-06-17 Thread Melameth, Daniel D.
I think I'm going to leave this as an unresolved case--shame though. I also performed the following: * Replaced my ActionTec gt701 modem with a Cisco 678 (was going to do this anyway) and the same issue--Windows is fast, OpenBSD is not * Replaced xl with fxp and the same issue--however, OpenBSD

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Gerardo Santana Gómez Garrido
The best part for me: I think our code quality is higher, just because that's really a big focus for us _Quality_ is the point. On 6/17/05, Steven Day [EMAIL PROTECTED] wrote: I love this part You know what I found? Right in the kernel, in the heart of the operating system, I found a