Re: HP DL145 G2?

2005-07-26 Thread Johan M:son Lindman
On Monday 25 July 2005 16.52, Mike Shaw wrote: Hey folksI'm about to build another obsd server for some pseudo-mission critical work, and HP is kind of our standard now. I've verified with someone off list that a DL140's run well, but for performance and philosophical reasons I'm choosing

Re: carp failover on DSL and Cable connection?

2005-07-26 Thread Stephen Marley
On Mon, Jul 25, 2005 at 08:57:06PM -0700, Jonathan Walther wrote: You could run ospfd (or quagga) on each host. (You'll need to use gif or gre tunnels to give a multicast capable link over the vpns). Make the dsl tunnel the lower cost route and ospf will change the routing tables to use the

Re: MySQL socket problem (solved)

2005-07-26 Thread Uwe Dippel
On Thu, 21 Jul 2005 13:22:43 +0300, Tomas wrote: BTW Edd, I liked your trick :) Me, too !! maybe something wrong still on my side, though; because the trick only works with an additional chown _mysql:_mysql /var/www/var/run/mysql/ in my case, otherwise I get 050726 16:57:22 mysqld started

Re: Disable IPv6 on 3.7

2005-07-26 Thread Russell J. Wood
On Tue, Jul 26, 2005 at 03:05:37AM +0200, knitti wrote: On 7/26/05, Russell J. Wood [EMAIL PROTECTED] wrote: On Mon, Jul 25, 2005 at 08:42:29PM -0400, Brad wrote: Go ahead if you want to use a custom un-supported system. Thanks, I will. What is it that you think you're gaining

Re: MySQL socket problem (solved)

2005-07-26 Thread Edd Barrett
chown _mysql:_mysql /var/www/var/run/mysql/ Because mine was on my laptop (which isnt connected to the network when I run mysql. Infact I hardly ever run mysql), I took the shortcut 'mysqld_safe --user=root' to start it. You are right, the mysql user will have to have access Edd

Re: Disable IPv6 on 3.7

2005-07-26 Thread Adam Papai
knitti said: What is it that you think you're gaining from this? A system without IPv6. you won't. you'll get a kernel without IPv6. and a broken system. knitti's right. But why do you so much against Ipv6? -- Adam Papai D i g i t a l Influence E-mail: [EMAIL PROTECTED] Phone: +36 30

Re: Disable IPv6 on 3.7

2005-07-26 Thread Henning Brauer
* Russell J. Wood [EMAIL PROTECTED] [2005-07-26 02:36]: Yes, one can by commenting out `OPTION INET6' in the kernel configuration. the question was specifically (and for good reasons) for doing so WITHOUT compiling a custom kernel. And one would want to do that if they don't use, IPv6, since

spamd greylisting, masking on /24

2005-07-26 Thread Stuart Henderson
I seem to remember seeing a patch to spamd that makes greylisting only look at the first /24 of the address, but I can't find it after fairly extensive searching with google/marc. Does anyone have a copy they could point me at? The whitelists on puremagic.com (on which greylisting.org's lists

Re: Create my own shell?

2005-07-26 Thread Jon Drews
On 7/25/05, Jon Drews [EMAIL PROTECTED] wrote: On 7/25/05, Abel Talaversn Estevez [EMAIL PROTECTED] wrote: I need to create a particular but simple shell for a firewall running OpenBSD 3.6. The idea is create a user whose shell is a very limited one. Hi: Operating ksh in restricted

Re: Did anybody hear this??

2005-07-26 Thread Jurjen Oskam
On Mon, Jul 25, 2005 at 10:05:32PM -0700, Bruno Delbono wrote: how much truth is actually in this article??? It makes a lot of sense and is right on. What I take out of this article is that having one single firewall (can be any type: network, application etc.) at the perimeter doesn't stop

Updating packages.

2005-07-26 Thread Kevin MacPherson
Hello, I'm trying to go from stable to current. I have the kernel and userland in place but having trouble updating my desktop. When trying to compile gnome I'm getting errors on the dependencies conflicting with older versions of themselves? Is there anyway to tell the make command to force

Re: Updating packages.

2005-07-26 Thread Edd Barrett
On 26/07/05, Kevin MacPherson [EMAIL PROTECTED] wrote: Hello, I'm trying to go from stable to current. I have the kernel and userland in place but having trouble updating my desktop. When trying to compile gnome I'm getting errors on the dependencies conflicting with older versions of

Re: Did anybody hear this??

2005-07-26 Thread Terry Tyson
On Tue, Jul 26, 2005 at 03:20:05PM +0200, Jurjen Oskam wrote: snip It does look like the before situation in the article is one where there is only one firewall that separates the LAN from the Internet, and everything on the LAN is treated equally, workstations and servers alike.

Re: Did anybody hear this??

2005-07-26 Thread Spruell, Darren-Perot
From: Terry Tyson [mailto:[EMAIL PROTECTED] Generally, that is a bad situation. So, the advice to put different types of machines into different (protected) networks is good. I only have one firewall but it is three legged, the DMZ box and the LAN are seperate. Is this what you mean by

Re: Did anybody hear this??

2005-07-26 Thread Jurjen Oskam
On Tue, Jul 26, 2005 at 11:20:35AM -0500, Terry Tyson wrote: I only have one firewall but it is three legged, the DMZ box and the LAN are seperate. Is this what you mean by different (protected) networks? Everything depends on your particular situation and needs, but the general idea is that

chrooted httpd and directory

2005-07-26 Thread Vlad Ciubotariu
Which path should I use in a directory directive in the config file for a chrooted httpd? In both cases below, changing Deny to Allow achieves the desired effect. thanks! Directory /var/www/users/* AllowOverride FileInfo AuthConfig Limit Options Options MultiViews Indexes

Anyone know of a mavell based dual gigE copper card

2005-07-26 Thread Bill Chmura
From what everyone told me last time, the SK stuff is good. So I can fit my network together with a few dual cards, trunk the smaller stuff together and then be on my way. Trouble is I cannot find (for the life of me) anything dual based on the marvell stuff. The obsd man page

Other Sharp Zauri?

2005-07-26 Thread STeve Andre'
Hopefully this more general question is appropriate here. I've noticed sales for the Zaurus SL-5500. Geeks.com has a sale on them right now. My question is if it makes sense for efforts to support any of the other units besides the C3000 and C3100. I know very little about the Zaurus

Re: Anyone know of a mavell based dual gigE copper card

2005-07-26 Thread Henning Brauer
* Bill Chmura [EMAIL PROTECTED] [2005-07-26 19:48]: For dual it only lists the SK-9822 SK-NET GE-T dual port, copper adapter, which from threads I read is now realTek chips in the newer revs. huh? that was linksys or dlink or netgear or one of the usual bandits. The SysKonnect stuff was and is

isakmpd stops forwarding data over enc0

2005-07-26 Thread Sean Knox
Sometime this morning, our openbsd firewall/VPN server entered a state where it stopped forwarding encrypted traffic over the enc0 interface. Incoming roadwarrior connections establish tunnels fine, but nothing is sent over enc0. There have been no isakmpd or pf configuration changes. There's

Re: Updating packages

2005-07-26 Thread Dimitri Yioulos
On Tuesday July 26 2005 11:09 am, Edd Barrett wrote: Today 11:09:49 am On 26/07/05, Kevin MacPherson [EMAIL PROTECTED] wrote: Hello, I'm trying to go from stable to current. I have the kernel and userland in place but having trouble updating my desktop. When trying to compile gnome

Bridge Interface stop ICMP redirects?

2005-07-26 Thread Steve Williams
Hi, I had a great design redesign and secure a client's network. Once I got on site, there was a little surprise for me ... I can't re number a router that I had hoped to. Right now, there are multiple gateways on one network (all the gateways are plugged into one switch). They have a

Re: Other Sharp Zauri?

2005-07-26 Thread Stefan Johnson
On 7/26/05, Greg Thomas [EMAIL PROTECTED] wrote: On 7/26/05, STeve Andre' [EMAIL PROTECTED] wrote: Hopefully this more general question is appropriate here. I've noticed sales for the Zaurus SL-5500. Geeks.com has a sale on them right now. I've been thinking about one myself even

Re: Bridge Interface stop ICMP redirects?

2005-07-26 Thread Steve Williams
Hi, That sounds great! Thanks very much for pointing that out, I would never have thought about sysctl to control that... Cheers, Steve Spruell, Darren-Perot wrote: From: Steve Williams [mailto:[EMAIL PROTECTED] The main network is 192.168.11.0/24. The default gateway for the network

Re: MySQL socket problem (solved)

2005-07-26 Thread Jonathan Schleifer
Another way is this: # MySQL if [ -x /usr/local/bin/mysqld_safe ]; then echo -n ' mysqld' rm -f /var/www/var/run/mysql/mysql.sock /usr/local/bin/mysqld_safe /dev/null sleep 10 ln /var/run/mysql/mysql.sock /var/www/var/run/mysql/mysql.sock fi That's my

rdr question

2005-07-26 Thread GV
Hi list, is it possible to have the following: rdr on $ext_if proto tcp from any to any port 80 - $server re-written as: rdr on $ext_if proto tcp from any to domain.com port 80 - $server where $server an internal web server and domain.com a specific domain name? In general I would like to

Re: rdr question

2005-07-26 Thread Stuart Henderson
--On 27 July 2005 00:27 +0200, GV wrote: is it possible to have the following: rdr on $ext_if proto tcp from any to any port 80 - $server re-written as: rdr on $ext_if proto tcp from any to domain.com port 80 - $server where $server an internal web server and domain.com a specific domain

Apache icons inside chroot

2005-07-26 Thread Chris Zakelj
I've done the googling and turned up empty :( I'm trying to get the included icons to show when someone does a directory view, but everything I try comes back with: [Wed Jul 27 01:35:57 2005] [error] [client 192.168.0.3] (13)Permission denied: access to /icons/movie.gif failed because

openbsd rpc/xdr

2005-07-26 Thread Gustavo Rios
Hey folks, i am doing efforts in order to learn about xdr/rpc. So, i decided to read some code in src/lib/libc/rpc. I found it to be a little heavy, cause there too many function invocation overhead between the caller and the real function that do the job. So, i wonder if anybody knows an

Re: Did anybody hear this??

2005-07-26 Thread Siju George
On 7/26/05, Bruno Delbono [EMAIL PROTECTED] wrote: +++ Siju George [Tue Jul 26, 2005 at 10:18:56AM +0530]: how much truth is actually in this article??? It makes a lot of sense and is right on. What I take out of this article is that having one single firewall (can be any type: network,

Re: Did anybody hear this??

2005-07-26 Thread Chris Kuethe
On 7/26/05, Siju George [EMAIL PROTECTED] wrote: On 7/26/05, Bruno Delbono [EMAIL PROTECTED] wrote: +++ Siju George [Tue Jul 26, 2005 at 10:18:56AM +0530]: how much truth is actually in this article??? It makes a lot of sense and is right on. What I take out of this article is that

Re: Anyone know of a mavell based dual gigE copper card

2005-07-26 Thread Brad
On Tue, Jul 26, 2005 at 08:06:59PM +0200, Henning Brauer wrote: * Bill Chmura [EMAIL PROTECTED] [2005-07-26 19:48]: For dual it only lists the SK-9822 SK-NET GE-T dual port, copper adapter, which from threads I read is now realTek chips in the newer revs. huh? that was linksys or dlink

Re: openbsd rpc/xdr

2005-07-26 Thread Artur Grabowski
Gustavo Rios [EMAIL PROTECTED] writes: Hey folks, i am doing efforts in order to learn about xdr/rpc. So, i decided to read some code in src/lib/libc/rpc. I found it to be a little heavy, cause there too many function invocation overhead between the caller and the real function that do the