Re: IDE / SATA Filesystem Mounting Problem

2005-07-25 Thread George Georgalis
On Sun, Jul 24, 2005 at 10:40:00PM -0600, Tobias Weingartner wrote: On Sunday, July 24, bofh wrote: On 7/24/05, George Georgalis [EMAIL PROTECTED] wrote: I have the sense there is a way to use GENERIC, somehow I just need to tell the kernel the BIOS disk 0x80 is wd0, 0x81 is wd1, 0x82 is

Re: The MD5-File at the Server... (Request for RMD160 and SHA1 Checksums)

2005-07-25 Thread sebastian . rother
To create a collision is non-trivial and would also drastically change the filesizes. Sorry, davidu You're (maybe) right but lets take a look at this file: ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/i386/MD5 There's no entry for the Size... Btw: Because another guy told me to buy a CD: I

3.7 install hangs with 3ware 8006-2LP

2005-07-25 Thread Willi Schiegel
Hello Group, I tried to install OpenBSD 3.7 on an Intel Pentium4 system with a 3ware Escalade 8006-2LP raid controller but the installation hangs with a system freeze. I found in the supported hardware section of the OpenBSD documentation under RAID and Cache Controllers: - 3ware Escalade

Conexant Amigo usb ADSL modem .

2005-07-25 Thread RGKärcher
Hi guys , How can I make it works the usb modem conexant Amigo under OpenBSD ? On linux I have to recompile the kernel and do other stuff to make it works ... Have any of you have succedded using this kind of Adsl Usb modem ? Thanks in advance , Regards , Richard Karcher Ricardo

Get desired NWID

2005-07-25 Thread Marc Winiger
Hi On wi(4) wlan cards it is possible to get the desired nwid with WI_RID_DESIRED_SSID, independent whether the card is associated to an access point or not. Cards with other drivers, are using SIOCG80211NWID to get the nwid. But this value contains the actual nwid associated to, not the one I

Re: missing: ./etc/acpi

2005-07-25 Thread Stuart Henderson
--On 24 July 2005 14:25 -0700, b h wrote: Checking special files and directories. Output format is: filename: criteria (shouldbe, reallyis) missing: ./etc/acpi Check you have updated /etc/mtree files from /usr/src/etc and have run mtree (right near the end of

Re: OT: any problems with webservers on high ports blocked by corporate-firewalls?

2005-07-25 Thread Lars Hansson
On Sun, 24 Jul 2005 15:24:06 -0700 Miles Keaton [EMAIL PROTECTED] wrote: Wondering if anyone has seen a trend these days for most companies to block all but port 80 or something? FYI, we block *everything*, employees have to use our proxyserver (squid) to browse the web. --- Lars Hansson

Re: Disable IPv6 on 3.7

2005-07-25 Thread Lukas Ratajski
On Monday 25 July 2005 11:17, you wrote: Is it possible to disable IPv6 on OpenBSD 3.7 without building a custom kernel ? I suggest that you leave it untouched. If you decide not to do so, be prepared to encounter problems without any support from here. This issue appeared some time ago (and

Re: Disable IPv6 on 3.7

2005-07-25 Thread Andreas Kahari
See the archives. Here's is one example: http://marc.theaimsgroup.com/?l=openbsd-miscm=109473296323761w=2 Andreas On 25/07/05, Gordon Ross [EMAIL PROTECTED] wrote: Is it possible to disable IPv6 on OpenBSD 3.7 without building a custom kernel ? -- Andreas Kahari PGP: 1024D/C2E163CB

Re: Disable IPv6 on 3.7

2005-07-25 Thread Lars Hansson
On Mon, 25 Jul 2005 10:17:56 +0100 Gordon Ross [EMAIL PROTECTED] wrote: Is it possible to disable IPv6 on OpenBSD 3.7 without building a custom kernel ? No. --- Lars Hansson

Re: Disable IPv6 on 3.7

2005-07-25 Thread Shawn K. Quinn
On Mon, 2005-07-25 at 10:17 +0100, Gordon Ross wrote: Is it possible to disable IPv6 on OpenBSD 3.7 without building a custom kernel ? No, but why would you need to? Just don't assign an Internet-routable IPv6 address to the interface, if you're worried about security. -- Shawn K. Quinn

Re: carp failover on DSL and Cable connection?

2005-07-25 Thread Stephen Marley
On Sun, Jul 24, 2005 at 10:37:29PM -0700, Jonathan Walther wrote: I've read the carp manpage, but am not clear if carp is able to help in the following scenario: A box at a high availability colo site forwards some traffic to a company LAN using a VPN. There are two VPN connections it could

Re: The MD5-File at the Server... (Request for RMD160 and SHA1 Checksums)

2005-07-25 Thread Luis Bruno
[EMAIL PROTECTED] wrote: Btw: Because another guy told me to buy a CD: I do But what's about ARCHs wich ar enot on the CD? Which reminds me: I'd love to be able to *buy* a DVD from Wim with all i386 packages. I know how to make one, but if I'm buying the pack, I'd like to have all the

Spam mail warning notification! (LGI Policies)

2005-07-25 Thread NO-REPLY . antispam
eManager Notification * The following mail was blocked since it contains sensitive content. Source mailbox: misc@openbsd.org Destination mailbox(es): [EMAIL PROTECTED] Policy: LGI Policies Action: Delete Content filter has detected a sensitive e-mail.

Re: The MD5-File at the Server... (Request for RMD160 and SHA1 Checksums)

2005-07-25 Thread Erik Wikström
On 2005-07-25 08:41, [EMAIL PROTECTED] wrote: And yes: Adding another Checksum wouldn't prevent an Attacker to recrete these files and replace them. But the chance isn't very high that an attackler could own 3 or 4 different Servers in different networks at the same time. So every user would be

Re: The MD5-File at the Server... (Request for RMD160 and SHA1 Checksums)

2005-07-25 Thread Erik Wikström
On 2005-07-25 12:16, Erik Wikstrvm wrote: On 2005-07-25 08:41, [EMAIL PROTECTED] wrote: And yes: Adding another Checksum wouldn't prevent an Attacker to recrete these files and replace them. But the chance isn't very high that an attackler could own 3 or 4 different Servers in different

Re: The MD5-File at the Server... (Request for RMD160 and SHA1 Checksums)

2005-07-25 Thread sebastian . rother
On 2005-07-25 08:41, [EMAIL PROTECTED] wrote: And yes: Adding another Checksum wouldn't prevent an Attacker to recrete these files and replace them. But the chance isn't very high that an attackler could own 3 or 4 different Servers in different networks at the same time. So every user would

Re: 005_libz.patch - fails to change directory

2005-07-25 Thread Clint M. Sand
On Fri, Jul 22, 2005 at 08:00:50PM -0600, Todd C. Miller wrote: In message [EMAIL PROTECTED] so spake Uwe Dippel (udippel): Strange, we had the same thing with the last patch. Looks like the main ftp mirror is not updating. I've left a message but it may not get fixed for a

Re: The MD5-File at the Server... (Request for RMD160 and SHA1 Checksums)

2005-07-25 Thread Marc Espie
On Mon, Jul 25, 2005 at 01:38:01PM +0200, [EMAIL PROTECTED] wrote: MD5 is brocken like rmd160 and sha1. But to make an attack vs. all the 3 algorithms seams to be impossible (for now..). And it's much harder to not change e.g. the file-size if you created a collision against all of the

Re: 005_libz.patch - fails to change directory

2005-07-25 Thread Brad
On Mon, Jul 25, 2005 at 09:03:03AM -0400, Clint M. Sand wrote: On Fri, Jul 22, 2005 at 08:00:50PM -0600, Todd C. Miller wrote: In message [EMAIL PROTECTED] so spake Uwe Dippel (udippel): Strange, we had the same thing with the last patch. Looks like the main ftp mirror is not

Create my own shell?

2005-07-25 Thread Abel Talaverón Estevez
Hi all, I need to create a particular but simple shell for a firewall running OpenBSD 3.6. The idea is create a user whose shell is a very limited one. This shell or command line interpreter (CLI) must have permissions only in the home directory. How could I do this? Any ideas? Editing the

pfsync problem

2005-07-25 Thread luis
Hi all, i've a problem with pfsync. If i permit the change of information throw pfsync the downloads from ftp server rarely finish with success. This seem's to affect only the ftp downloads. I've made a tcpdump from pfsync0 and i can't see a state termination problem. Can you tell me if

bgpd and community attribute setting

2005-07-25 Thread G Douglas Davidson
I'm running bgpd on openbsd version 3.5 (I know, time to upgrade.) I'm attempting to create a network statement that sets the community value to NO_EXPORT for a network and I'm getting syntax errors. I've tried: network 192.168.1.0/24 set community 65535:65281 And I get:

Re: 3.7 install hangs with 3ware 8006-2LP

2005-07-25 Thread L. V. Lammert
On Mon, 25 Jul 2005, Willi Schiegel wrote: Hello Group, I tried to install OpenBSD 3.7 on an Intel Pentium4 system with a 3ware Escalade 8006-2LP raid controller but the installation hangs with a system freeze. I found in the supported hardware section of the OpenBSD documentation under

Re: missing: ./etc/acpi

2005-07-25 Thread b h
--- Stuart Henderson [EMAIL PROTECTED] wrote: --On 24 July 2005 14:25 -0700, b h wrote: Checking special files and directories. Output format is: filename: criteria (shouldbe, reallyis) missing: ./etc/acpi Check you have updated /etc/mtree files from

Re: Create my own shell?

2005-07-25 Thread Jon Drews
On 7/25/05, Abel Talaversn Estevez [EMAIL PROTECTED] wrote: Hi all, I need to create a particular but simple shell for a firewall running OpenBSD 3.6. The idea is create a user whose shell is a very limited one. This shell or command line interpreter (CLI) must have permissions only in the

Re: bgpd and community attribute setting

2005-07-25 Thread Henning Brauer
* G Douglas Davidson [EMAIL PROTECTED] [2005-07-25 16:30]: I'm running bgpd on openbsd version 3.5 (I know, time to upgrade.) I'm attempting to create a network statement that sets the community value to NO_EXPORT for a network and I'm getting syntax errors. support for setting communities

HP DL145 G2?

2005-07-25 Thread Mike Shaw
Hey folksI'm about to build another obsd server for some pseudo-mission critical work, and HP is kind of our standard now. I've verified with someone off list that a DL140's run well, but for performance and philosophical reasons I'm choosing AMD...looking at a DL145 G2 2Ghz SATA. I saw some

Re: bgpd and community attribute setting

2005-07-25 Thread G Douglas Davidson
On Jul 25, 2005, at 10:49 AM, Henning Brauer wrote: * G Douglas Davidson [EMAIL PROTECTED] [2005-07-25 16:30]: I'm running bgpd on openbsd version 3.5 (I know, time to upgrade.) I'm attempting to create a network statement that sets the community value to NO_EXPORT for a network and I'm

Re: Create my own shell?

2005-07-25 Thread Andreas Kahari
On 25/07/05, Abel Talaversn Estevez [EMAIL PROTECTED] wrote: Hi all, I need to create a particular but simple shell for a firewall running OpenBSD 3.6. The idea is create a user whose shell is a very limited one. This shell or command line interpreter (CLI) must have permissions only in the

Re: Create my own shell?

2005-07-25 Thread Qv6
Operating ksh in restricted mode may fulfill your needs. Here from the man page for ksh (this is the public domain Korn Shell in OpenBSD): -r Restricted shell. A shell is ``restricted'' if this option is used or if either the basename the shell was invoked with or the SHELL

Re: OT: any problems with webservers on high ports blocked by corporate-firewalls?

2005-07-25 Thread Miles Keaton
On 7/25/05, Lars Hansson [EMAIL PROTECTED] wrote: FYI, we block *everything*, employees have to use our proxyserver (squid) to browse the web. In a proxyserver like that, if someone tried to go to http://somedomain.com:8765/ would it work?

Re: OT: any problems with webservers on high ports blocked by cor porate-firewalls?

2005-07-25 Thread Spruell, Darren-Perot
From: Miles Keaton [mailto:[EMAIL PROTECTED] On 7/25/05, Lars Hansson [EMAIL PROTECTED] wrote: FYI, we block *everything*, employees have to use our proxyserver (squid) to browse the web. In a proxyserver like that, if someone tried to go to http://somedomain.com:8765/ would it work?

Re: OT: any problems with webservers on high ports blocked by corporate-firewalls?

2005-07-25 Thread knitti
On 7/25/05, Miles Keaton [EMAIL PROTECTED] wrote: On 7/25/05, Lars Hansson [EMAIL PROTECTED] wrote: FYI, we block *everything*, employees have to use our proxyserver (squid) to browse the web. In a proxyserver like that, if someone tried to go to http://somedomain.com:8765/ would it work?

Out of Office AutoReply: [SPAM_EMAIL] - Mail Delivery (failure [EMAIL PROTECTED]) - Email found in subject

2005-07-25 Thread Mandeep Sodhi
I am currently out of the office and will return on 7/27. If this is urgent please reach me on my cell phone 916-704-7077. I will also be checking my emails periodically. thanks mandeep Mandeep Sodhi Vice President Sales R Systems Inc http://www.rsystems.com Work: 916-939-5108 Cell:

Re: IDE / SATA Filesystem Mounting Problem

2005-07-25 Thread George Georgalis
On Fri, Jul 22, 2005 at 05:38:54PM -0500, bofh wrote: On 7/20/05, Ryan Yu [EMAIL PROTECTED] wrote: I'm having a problem adding a SATA drive to my current obsd configuration. I have two IDE drives in the box. A 12gig and a 40gig. I have the /, /usr, /var, /tmp and swap on the 12gig and /home

Re: IPSec Routing / Multiple Subnets / GRE Revisited

2005-07-25 Thread Brian A. Seklecki
On Sat, 23 Jul 2005, Hans-Joerg Hoexer wrote: Hi, On Fri, Jul 22, 2005 at 06:43:34PM -0400, Brian A. Seklecki wrote: The URL: http://digitalfreaks.org/~lavalamp/openbsd_ipsec_generic.png Outlines the generic cookie-cutter configuration from vpn(8) with addressing changes. A couple of

eTimeBanker® Online Banking Account Access Limited (Security Code: PP-090-227-824)

2005-07-25 Thread [EMAIL PROTECTED]
[IMAGE] Dear Bank Of The West Customer, This is your official notification from Bank Of The West that the service(s) listed below will be deactivated and deleted if not renewed immediately. Previous notifications have been sent to the Billing Contact assigned to this account. As

Re: Disable IPv6 on 3.7

2005-07-25 Thread Russell J. Wood
Yes, one can by commenting out `OPTION INET6' in the kernel configuration. And one would want to do that if they don't use, IPv6, since it's pointless fat otherwise. - Russell On Mon, Jul 25, 2005 at 04:57:17AM -0500, Shawn K. Quinn wrote: On Mon, 2005-07-25 at 10:17 +0100, Gordon Ross wrote:

Re: Disable IPv6 on 3.7

2005-07-25 Thread Brad
Go ahead if you want to use a custom un-supported system. What is it that you think you're gaining from this? On Tue, Jul 26, 2005 at 08:29:19AM +0800, Russell J. Wood wrote: Yes, one can by commenting out `OPTION INET6' in the kernel configuration. And one would want to do that if they

Re: Disable IPv6 on 3.7

2005-07-25 Thread Rod.. Whitworth
On Tue, 26 Jul 2005 08:29:19 +0800, Russell J. Wood wrote: Yes, one can by commenting out `OPTION INET6' in the kernel configuration. You have the OP asking if he can disable it on OpenBSD 3.7 without building a custom kernel ? and you offer that really bright solution ? Just commenting it out

Re: Disable IPv6 on 3.7

2005-07-25 Thread Russell J. Wood
On Mon, Jul 25, 2005 at 08:42:29PM -0400, Brad wrote: Go ahead if you want to use a custom un-supported system. Thanks, I will. What is it that you think you're gaining from this? A system without IPv6. On Tue, Jul 26, 2005 at 08:29:19AM +0800, Russell J. Wood wrote: Yes, one can by

Re: Disable IPv6 on 3.7

2005-07-25 Thread Russell J. Wood
On Tue, Jul 26, 2005 at 10:51:05AM +1000, Rod.. Whitworth wrote: On Tue, 26 Jul 2005 08:29:19 +0800, Russell J. Wood wrote: Yes, one can by commenting out `OPTION INET6' in the kernel configuration. You have the OP asking if he can disable it on OpenBSD 3.7 without building a custom

Re: Disable IPv6 on 3.7

2005-07-25 Thread knitti
On 7/26/05, Russell J. Wood [EMAIL PROTECTED] wrote: On Mon, Jul 25, 2005 at 08:42:29PM -0400, Brad wrote: Go ahead if you want to use a custom un-supported system. Thanks, I will. What is it that you think you're gaining from this? A system without IPv6. you won't. you'll get a

Re: Disable IPv6 on 3.7

2005-07-25 Thread Peter Hessler
On Tue, 26 Jul 2005 08:58:38 +0800 Russell J. Wood [EMAIL PROTECTED] wrote: : Wow. I'm honestly suprised by the responses I've received. All I did : was answer a question and now I'm being jumped on, repeatedly. You told a user how to aim the proverbial gun at their foot. I'm suprised the

Re: Disable IPv6 on 3.7

2005-07-25 Thread Sean Brown
On July 25, 2005 7:34 pm, Peter Hessler wrote: On Tue, 26 Jul 2005 08:58:38 +0800 Russell J. Wood [EMAIL PROTECTED] wrote: : Wow. I'm honestly suprised by the responses I've received. All I did : was answer a question and now I'm being jumped on, repeatedly. You told a user how to aim the

Re: mouse button emulation x.org backspace 8 bit X

2005-07-25 Thread rutledge.50
Rafael Marques Parra wrote: Could you send me your line about the right button mouse emulation ??? I have a powerbook g4 and I use windowmaker so I need the emulation. Thanks in advance. Hi Rafael, Sure, here is my ~/.Xmodmap: keycode 76 = Pointer_Button2 Pointer_Drag2 keycode 95 =

Re: OT: any problems with webservers on high ports blocked by corporate-firewalls?

2005-07-25 Thread Lars Hansson
On Mon, 25 Jul 2005 08:42:33 -0700 Miles Keaton [EMAIL PROTECTED] wrote: In a proxyserver like that, if someone tried to go to http://somedomain.com:8765/ would it work? If it was set up to allow connections to port 8765 it would but that pretty much defeats the purpose of doing the blocking

Re: Disable IPv6 on 3.7

2005-07-25 Thread Lars Hansson
On Tue, 26 Jul 2005 08:29:19 +0800 Russell J. Wood [EMAIL PROTECTED] wrote: Yes, one can by commenting out `OPTION INET6' in the kernel configuration. That wasnt the question. The question was if it can be done WITHOUT a custom kernel and the answer to that is no. --- Lars Hansson

Re: carp failover on DSL and Cable connection?

2005-07-25 Thread Jonathan Walther
On Mon, Jul 25, 2005 at 10:54:00AM +0100, Stephen Marley wrote: On Sun, Jul 24, 2005 at 10:37:29PM -0700, Jonathan Walther wrote: I've read the carp manpage, but am not clear if carp is able to help in the following scenario: A box at a high availability colo site forwards some traffic to a

Did anybody hear this??

2005-07-25 Thread Siju George
Hi all, how much truth is actually in this article??? http://www.securitypipeline.com/165700439 Thankyou so much Kind regards Siju

Re: Did anybody hear this??

2005-07-25 Thread Bruno Delbono
+++ Siju George [Tue Jul 26, 2005 at 10:18:56AM +0530]: how much truth is actually in this article??? It makes a lot of sense and is right on. What I take out of this article is that having one single firewall (can be any type: network, application etc.) at the perimeter doesn't stop hackers.

VIA EPIA-V USB device problem

2005-07-25 Thread Marc Beyerlin
Hey. I am trying hard to get some USB devices to work on a VIA EPIA-V board with VIA VT83C572 USB chipset using OpenBSD 3.7 (see dmesg below). I tried it with an USB stick an an USB Ethernet adapter, both worked on an other machine with an asus board and openbsd 3.6, so i am sure that

Re: Did anybody hear this??

2005-07-25 Thread Chris Kuethe
On 7/25/05, Siju George [EMAIL PROTECTED] wrote: Hi all, how much truth is actually in this article??? http://www.securitypipeline.com/165700439 Bla bla bla firewalls are dead bla bla bla defense in depth bla bla bla. Ultimately the good points the author makes are 1) you really should be

Re: OT: any problems with webservers on high ports blocked by corporate-firewalls?

2005-07-25 Thread Miles Keaton
Cool. Thanks for your help, everyone.