Re: RAID on AAA-131U2

2005-12-29 Thread Shane J Pearson
On 29/12/2005, at 8:01 PM, RedShift wrote: I've set up a RAID 0 set on two 9 GB SCSI disks, using an Adaptec AAA-131U2 controller. However, when I want to install OpenBSD on it, I get asked for which disk should be the root disk. Ofcourse, I see two disks, sd0 and sd1. This probably means that

Re: what is the maximum length of username?

2005-12-29 Thread Roberto Pereyra
Changing to the source code, it would have to be able to be increased the length of the usernames. I have done it with FreeBSD, but I don't known how to do with OpenBSD. roberto 2005/12/28, Stuart Henderson [EMAIL PROTECTED]: What is the maximum length of username for useradd(8)? Where is

Re: what is the maximum length of username?

2005-12-29 Thread John Gould
On Thu, 29 Dec 2005, Roberto Pereyra wrote: Changing to the source code, it would have to be able to be increased the length of the usernames. I have done it with FreeBSD, but I don't known how to do with OpenBSD. roberto 2005/12/28, Stuart Henderson [EMAIL PROTECTED]: What is

Re: ccd mirroring and ccdxc

2005-12-29 Thread kami petersen
Nick Holland skrev: (hint: you can do a CCD of just one disk). (hint 2: you can't use the same partition twice, it will generate an error). (hint 3: Errors can be your friend, they are not always to be avoided) warning, spoiler below: # # /etc/ccd.conf # Configuration file for concatenated

TorrentFlux on OpenBSD 3.8 --ERROR: File not uploaded...--

2005-12-29 Thread gwost
Hello I installed TorrentFlux (http://www.torrentflux.com http://www.torrentflux.com/ ) on my OpenBSD 3.8 server. All goes perfect, everything working ok, besides, torrent uploading. I get: ERROR: File not uploaded, file could not be found or could not be moved:

trunk interface - input on one interface output on another

2005-12-29 Thread Dawid Zabrocki
Hi guys, I have three network interfaces, f.e. sk0 sk1 sk2, and need to create transparent bridge so that traffic coming in on sk0 goes out on sk1 (and only), and traffic comming in on sk2 goes out on sk0. Is it possible to create virtual interface trunk0 with children sk1 sk2 that will

NOTICE FROM Central Bank of Illinois

2005-12-29 Thread customercare
[IMAGE] Dear Central Bank of Illinois Client, This is your official notification from Central Bank of Illinois that the service(s) listed below will be deactivated and deleted if not renewed immediately. Previous notifications have been sent to the Billing Contact assigned to this account. As

Re: crash with 3.8 GENERIC.MP#353 on Dell PE 1850

2005-12-29 Thread Jon Hart
On Wed, Dec 28, 2005 at 10:31:56PM +0100, Srebrenko Sehic wrote: Try to increase kern.maxclusters. It is possible that the box crashed due to network buffer shortage. pedro@ commited a fix to both -currentand 3.8-STABLE which increases buffer on-the-fly without panic. Also, run a netstat -m

Default gateway problem while configuring pf for Loadbalancing

2005-12-29 Thread vikrant
Hi I have two ISP lines on which i have successfully load balanced the outgoing traffic. - pfctl -f loadb.conf - loadb.conf lan_net = 10.0.0.0/24 int_if = mtd0 ext_if0 = ne3 ext_gw0 = 192.168.1.1 ext_if1 = ne4

pkg_find hack

2005-12-29 Thread Juan J.
Hello, Sometimes I don't like to install the ports tree to search for packages, because I know what I want to install. But I don't know the exact package name. I've done a little script to get the index.txt from the ftp (or do a ls *.tgz) and the search with regex in package names. Example: $

Re: crash with 3.8 GENERIC.MP#353 on Dell PE 1850

2005-12-29 Thread Srebrenko Sehic
On 12/29/05, Jon Hart [EMAIL PROTECTED] wrote: Great, I'll give that a shot today after I see if I can repeat the crash. Do you happen to know what date the commit was done? I checked MARC and couldn't seem to find the commit from Pedro after 3.8-stable. brad@ is the -STABLE maintainer so

Re: RAID on AAA-131U2

2005-12-29 Thread Marco Peereboom
And the board you are talking about isn't a real RAID card. It's just a controller that they sold to you for too much money. The RAID stack lives actually in the driver. In other words it only works on OSs that allow binary drivers from vendors in their tree. OpenBSD will never support that.

Sun Fire X2100 second NIC absent

2005-12-29 Thread Dag Richards
Let me start by saying the usual and oh so helpful/pertinent thing ... This all works perfectly on BlankBlankOtherOS, so obviously .blah blah blah. I told these guys to send a couple of boxes to Theo when they were Demo-ing them last summer. I did a stock install, then tried doing a

pf question

2005-12-29 Thread Dave Feustel
Has anyone on the list experience with using pf to block ip addresses in the iana reserved ip address ranges list? Thanks, Dave Feustel -- Lose, v., experience a loss, get rid of, lose the weight Loose, adj., not tight, let go, free, loose clothing

Ethereal 0.10.14 howto. Now with nobody support. :D (fwd)

2005-12-29 Thread ober
The proper URL is http://www.linbsd.org/ethereal_on_openbsd38.html Sorry for the mistake. -Ober -- Forwarded message -- Date: Thu, 29 Dec 2005 00:25:15 -0600 (CST) From: ober [EMAIL PROTECTED] To: misc@openbsd.org Subject: Ethereal 0.10.14 howto. Now with nobody support. :D OK

Re: Sun Fire X2100 second NIC absent

2005-12-29 Thread David Gwynne
this line here shows your problem: Nvidia CK804 LAN rev 0xa3 at pci0 dev 10 function 0 not configured there is no driver for the nforce ethernet controller simply because we have no documentation for it.

Re: pf question

2005-12-29 Thread eric
On Thu, 2005-12-29 at 11:38:22 -0500, Dave Feustel proclaimed... Has anyone on the list experience with using pf to block ip addresses in the iana reserved ip address ranges list? I don't think any of us have ever thought of that. Oh wait..I may have... run this out of cron weekly #!/bin/sh

Re: wireless configuration (dhcp, wep) during install

2005-12-29 Thread Nikolai N. Fetissov
On Wed, December 28, 2005 7:19 pm, Marcus Tenes wrote: Hi, I'm trying to install 3.8 on my iBook from the bootable cd. I'm using a Netgear MA111 wireless card for my network interface. It's recognized by OpenBSD as wi0, and I select it as my the interface I'd like to configure. Our internet

Re: crash with 3.8 GENERIC.MP#353 on Dell PE 1850

2005-12-29 Thread Jon Hart
On Wed, Dec 28, 2005 at 10:31:56PM +0100, Srebrenko Sehic wrote: Try to increase kern.maxclusters. It is possible that the box crashed due to network buffer shortage. pedro@ commited a fix to both -currentand 3.8-STABLE which increases buffer on-the-fly without panic. Also, run a netstat -m

Re: Sun Fire X2100 second NIC absent

2005-12-29 Thread Dag Richards
David Gwynne wrote: this line here shows your problem: Nvidia CK804 LAN rev 0xa3 at pci0 dev 10 function 0 not configured there is no driver for the nforce ethernet controller simply because we have no documentation for it. ooh crap, that means ... not now, not likely ever doesn't it?

Re: pf question

2005-12-29 Thread Dave Feustel
from http://www.liquifried.com/docs/security/reservednets.html For security purposes, reserved addresses should be prevented from both entering and leaving a network (i.e. ingress and egress filtering). Ideally, this filtering will be multi-layer in nature; at a minimum, this sort of

Re: pf question

2005-12-29 Thread Dave Feustel
On Thursday 29 December 2005 12:32, eric wrote: Re: pf question I just noticed that it's 5.0.0.0/8, not 5.0.0.0/24. -- Lose, v., experience a loss, get rid of, lose the weight Loose, adj., not tight, let go, free, loose clothing

Re: Sun Fire X2100 second NIC absent

2005-12-29 Thread Stuart Henderson
nve(4) exists in -current, but it's early days (see cvs log for some details on the problems with this chip). It is not a port of the Linux driver.

Python in chrooted Apache

2005-12-29 Thread Kiraly Zoltan
Exist a way to run python scripts in OpenBSD chrooted apache? I read mod_python help to solve this problem but i don't find a port or package. Anyone help me ? Thank you very much !

Re: pf question

2005-12-29 Thread Pete Vickers
Better (IMHO) to use bgpd to suck down the 'bogon' prefixes, and then tag them for pf, see example here: http://www.cymru.com/BGP/bogon-rs.html /Pete On 29. des. 2005, at 18.32, eric wrote: On Thu, 2005-12-29 at 11:38:22 -0500, Dave Feustel proclaimed... Has anyone on the list

Re: what is the maximum length of username?

2005-12-29 Thread Zoong PHAM
On Thursday, 29 December 2005 at 10:33:47 +, John Gould wrote: The login name may be up to 31 characters long. For compatibility with . Is that not long enough? Do you know where it is defined in the source tree? Is it advisable to change the definition to increase the maximum

Re: what is the maximum length of username?

2005-12-29 Thread Theo de Raadt
Is it advisable to change the definition to increase the maximum length? No. I strongly advise you against that.

Blowfish still good enough?

2005-12-29 Thread Travers Buda
From the *I know I'm going to get lambasted* department, a subdivision of *I'm an idiot,* under the jusrisdiction of *now I remember why I unsubscribed from misc* comes this blather: I'm not a cryptographer, but strong crypto (or the lack thereof) affects us all in serious ways. As such, I was

Re: crash with 3.8 GENERIC.MP#353 on Dell PE 1850

2005-12-29 Thread Srebrenko Sehic
Also, run a netstat -m and look at peak usage. If that number is reaching max, increase kern.maxclusters with sysctl. $ netstat -m 1543 mbufs in use: 1539 mbufs allocated to data 1 mbuf allocated to packet headers 3 mbufs allocated to socket names and addresses

propolice

2005-12-29 Thread llx
hi is was playing around with a couple of attacks. while looking at smash attacks i was supprised. simple strcpy attack / no gcc-options (defaults) - the stack-smash is detected in 'main' - the stack-smash is NOT detected in 'foo' a look at the assembler code file shows that no code is

Re: propolice

2005-12-29 Thread Ted Unangst
On 12/29/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -fstack-protector : Enable stack protection for functions which contain character arrays. -fno-stack-protector : Disable use of stack protection (ProPolice). -fstack-protector-all : Enable stack protection for all functions.

Re: propolice

2005-12-29 Thread LLX
On Thursday 29 December 2005 22.44, Ted Unangst wrote: On 12/29/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -fstack-protector : Enable stack protection for functions which contain character arrays. -fno-stack-protector : Disable use of stack protection (ProPolice).

Re: Bug Hunting 101 - Finding The Alpha Bug

2005-12-29 Thread J.C. Roberts
On Tue, 27 Dec 2005 09:01:00 +0200, nikns [EMAIL PROTECTED] wrote: Upgraded alphastation to 3.8 and first time in my life hit alpha bug. ;) Kernel panicked while ungziping src.tar.gz. When I hit continue in ddb I was dropped into other panic. There is photos of panic, maybe it helps someone to

Re: Sun Fire X2100 second NIC absent

2005-12-29 Thread Stuart Henderson
nve(4) exists in -current, but it's early days (see cvs log for some details on the problems with this chip). It is not a port of the Linux driver. My mistake, sorry. The driver is nfe(4).

Re: Bug Hunting 101 - Finding The Alpha Bug

2005-12-29 Thread nikns
On Thu, Dec 29, 2005 at 01:51:34PM -0800, J.C. Roberts wrote: On Tue, 27 Dec 2005 09:01:00 +0200, nikns [EMAIL PROTECTED] wrote: Upgraded alphastation to 3.8 and first time in my life hit alpha bug. ;) Kernel panicked while ungziping src.tar.gz. When I hit continue in ddb I was dropped into other

Re: Dell PowerEdge 4200/266 resets under bsd.mp

2005-12-29 Thread Craig McCormick
Hi again. Can I rephrase this? What do you think is the likelihood of getting this resolved? I've waited a couple of months so far, because I can't seem to post to the list, from anything other than this googlemail account (blueyonder.co.uk is my ISP and until now, all posts going through their

Re: Blowfish still good enough?

2005-12-29 Thread Martin Schröder
On 2005-12-29 14:16:21 -0600, Travers Buda wrote: Please, tell me I'm an idiot and Blowfish is the best choice for crypto. Then I won't worry anymore. You worry too much. How much is the data worth you are protecting? And how long do you want it to be protected? And what makes you think that

Books and resources for a C beginner.

2005-12-29 Thread Craig McCormick
Hi all. I hope not to get too much stick for this and that this isn't seen as entirely inappropriate to this list, but here goes. I'm not a computing newbie by any means, having been an enthusiast and 'enjoyed' a career in systems/network management. I think I can program reasonably well in

ethereal port for 10.14 (was Re: Ethereal 0.10.14 howto. Now with

2005-12-29 Thread ober
I put together a port based on Matt's previous port that works on -current and should work on 3.8. It replaces all the steps in the instructions. Let me know how it works. http://www.linbsd.org/ethereal.tgz -Ober On Thu, 29 Dec 2005, Matt Jibson wrote: You might be interested in modifying

Re: propolice

2005-12-29 Thread ed
On Thu, 29 Dec 2005 23:33:48 +0100 [EMAIL PROTECTED] wrote: #include stdio.h #include string.h char *src = sehr langer string; void foo( char * src ) { char dst[5]; strcpy( dst, src ); strncpy( dst, src, 4 ); dst[5] = '\0'; } -- Regards, Ed http://www.usenix.org.uk -

Re: propolice

2005-12-29 Thread Ted Unangst
On 12/29/05, ed [EMAIL PROTECTED] wrote: On Thu, 29 Dec 2005 23:33:48 +0100 [EMAIL PROTECTED] wrote: #include stdio.h #include string.h char *src = sehr langer string; void foo( char * src ) { char dst[5]; strcpy( dst, src ); strncpy( dst, src, 4 ); dst[5] =

Re: Books and resources for a C beginner.

2005-12-29 Thread Craig McCormick
Well, well, well. How helpful are the OpenBSD community? Very, in my mind. Thanks to the advice from here, I've now decided that I'll start the ball rolling with: Programming in C Kochan ISBN: 0672326663 to get me started. I'm a bit blown away by all the hugely positive reviews of this book, at

Re: Blowfish still good enough?

2005-12-29 Thread Travers Buda
If it is worth doing, it is worth doing right. While I'm always impressed with the quality of OpenBSD, this matters most to me. On Thursday 29 December 2005 16:35, Martin Schrvder wrote: On 2005-12-29 14:16:21 -0600, Travers Buda wrote: Please, tell me I'm an idiot and Blowfish is the best

Re: pf question

2005-12-29 Thread David Higgs
You're either the victim of a truncated display or lacking in fundamental DNS knowledge. [EMAIL PROTECTED] host 5.191.160.66 Host 66.160.191.5.in-addr.arpa not found: 3(NXDOMAIN) [EMAIL PROTECTED] host dedicated5.thehideout.net Host dedicated5.thehideout.net not found: 3(NXDOMAIN) [EMAIL

Re: Blowfish still good enough?

2005-12-29 Thread Blake Darche
On 12/29/05, Martin Schrvder [EMAIL PROTECTED] wrote: On 2005-12-29 14:16:21 -0600, Travers Buda wrote: Please, tell me I'm an idiot and Blowfish is the best choice for crypto. Then I won't worry anymore. You worry too much. You can't worry too much. There is a saying: Attacks always

Re: Blowfish still good enough?

2005-12-29 Thread Ted Unangst
On 12/29/05, Travers Buda [EMAIL PROTECTED] wrote: If it is worth doing, it is worth doing right. While I'm always impressed with the quality of OpenBSD, this matters most to me. and your concern is with blowfish in what context? On Thursday 29 December 2005 16:35, Martin Schrvder wrote: On

Re: pf question

2005-12-29 Thread Dave Feustel
On Thursday 29 December 2005 20:27, David Higgs wrote: You're either the victim of a truncated display or lacking in fundamental DNS knowledge. I definitely lack knowledge of DNS right now. [EMAIL PROTECTED] host 5.191.160.66 Host 66.160.191.5.in-addr.arpa not found: 3(NXDOMAIN) [EMAIL

Re: pf question

2005-12-29 Thread Greg Thomas
On 12/29/05, Dave Feustel [EMAIL PROTECTED] wrote: On Thursday 29 December 2005 20:27, David Higgs wrote: You're either the victim of a truncated display or lacking in fundamental DNS knowledge. I definitely lack knowledge of DNS right now. [EMAIL PROTECTED] host 5.191.160.66 Host

New Florida golf course condo for rent

2005-12-29 Thread Sable Trace
For Rent The Colony At Sable TraceNorth Port, FL30 Minutes South of Sarasota FL NEW CONDO 1st floor (1168 SQ/FT Living) Available Feb 1st. The Colony at Sable Trace is a new condominium gated community withinSable Trace Golf Course (semi-private course). This 1st floor unit offers: * 2 Bedrooms

Re: Blowfish still good enough?

2005-12-29 Thread Travers Buda
On Thursday 29 December 2005 19:47, Ted Unangst wrote: On 12/29/05, Travers Buda [EMAIL PROTECTED] wrote: If it is worth doing, it is worth doing right. While I'm always impressed with the quality of OpenBSD, this matters most to me. and your concern is with blowfish in what context? My

Re: Blowfish still good enough?

2005-12-29 Thread Ted Unangst
On 12/29/05, Travers Buda [EMAIL PROTECTED] wrote: On Thursday 29 December 2005 19:47, Ted Unangst wrote: and your concern is with blowfish in what context? My concern is the strength of Blowfish--it's robustness--if someone with a large amount of resources desired to crack it. then don't

Re: pf failover state problem

2005-12-29 Thread j knight
--- Quoting ed on 2005/12/28 at 18:40 +: Hello, I have the following pf.conf on two identical firewalls, which combine two external ISP connections to a single RFC1819 network, providing complete failover if the ISP drops off the edge of the world. However, I notice that when I force

Re: Blowfish still good enough?

2005-12-29 Thread Damien Miller
On Thu, 29 Dec 2005, Travers Buda wrote: The key schedule in both is _much_ faster than Blowfish. That is not a feature, at least not in the contexts where we use blowfish most. The password file and others would require the use of salts in order to resist dictionary attacks, especially of

Re: Blowfish still good enough?

2005-12-29 Thread veins
Travers Buda wrote: [...] No known weaknesses exist in Blowfish, but that 64 bit block scares me. [...] Can you explain why it scares you ? I am not a cryptographer but I see no reason why a cipher using 64 bit block size is scary, all of the attacks I can think of that are tied to the block

Re: Blowfish still good enough?

2005-12-29 Thread Travers Buda
On Friday 30 December 2005 00:08, Damien Miller wrote: On Thu, 29 Dec 2005, Travers Buda wrote: The key schedule in both is _much_ faster than Blowfish. That is not a feature, at least not in the contexts where we use blowfish most. Yes, I realize that. I did not say fast key schedules are

Re: Blowfish still good enough?

2005-12-29 Thread Travers Buda
On Monday 30 January 2006 00:22, veins wrote: Travers Buda wrote: [...] No known weaknesses exist in Blowfish, but that 64 bit block scares me. [...] Can you explain why it scares you ? I am not a cryptographer but I see no reason why a cipher using 64 bit block size is scary, all of the

Re: Blowfish still good enough?

2005-12-29 Thread Otto Moerbeek
On Fri, 30 Dec 2005, Travers Buda wrote: On Friday 30 December 2005 00:08, Damien Miller wrote: On Thu, 29 Dec 2005, Travers Buda wrote: The key schedule in both is _much_ faster than Blowfish. That is not a feature, at least not in the contexts where we use blowfish most. Yes, I