Re: Does iocharset option be supported in OpenBSD mount?

2006-01-27 Thread Guido Tschakert
Armand Chen wrote: Hi all :-) After I switched to OpenBSD, there are still some data in my old NTFS partition. I've made the NTFS support into kernel, and successfully mounted the NTFS partision. The problem is, some filename of the data is encoded other than ISO8859-1. In other UNIX-like

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-27 Thread Martin Schröder
On 2006-01-27 01:42:13 +1100, Shane J Pearson wrote: What an incredible load of tripe!... This belongs on advocacy.

state of sasyncd + udpencap port state

2006-01-27 Thread Martin Hedenfalk
Hello all, I have two questions: 1) What is the state of sasyncd in 3.8? (I'm currently running stable without any patches). The only hint that there would be known bugs or that sasyncd would be incomplete is this email: http://archives.neohapsis.com/archives/openbsd/2005-10/1804.html. 2)

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-27 Thread Henning Brauer
* Will H. Backman [EMAIL PROTECTED] [2006-01-26 23:15]: By sending carefully crafted sequence of IP packet fragments, a remote attacker can cause a system running pf with a ruleset containing a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule to crash. 1: Has this been verified to

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-27 Thread Otto Moerbeek
On Thu, 26 Jan 2006, Rob W wrote: http://www.securityfocus.com/bid/16375 is minor but important enough to report? A way to remotly crash a OpenBSD box is minor? If the number of systems affected is low, the answer may be yes. This problem only exists if you enable specific scrubbing options

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-27 Thread Joachim Schipper
On Fri, Jan 27, 2006 at 10:07:33AM +0100, Otto Moerbeek wrote: On Thu, 26 Jan 2006, Rob W wrote: http://www.securityfocus.com/bid/16375 is minor but important enough to report? A way to remotly crash a OpenBSD box is minor? If the number of systems affected is low, the answer may be

Squid and named DNS

2006-01-27 Thread Kiraly Zoltan
I have an OpenBSD gateway which share the Internet and use Squid. Squid proxy work transparent, OpenBSD PF allow this thing : rdr pass on fxp0 proto tcp to port www - 127.0.0.1 port 3128 I use Squid to filter web content like ad and pop-up (adzaper), I don't use Squid for cache. The problem is,

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security. (offlist)

2006-01-27 Thread Rob W
From: Chris Zakelj [EMAIL PROTECTED] This is a denial of service, not a security exploit. Crashing a box causes headaches, but the data within is still out of the reach of those who would like to steal it. It isn't important that people can crash your box remotely and make the services provided

Re: Safety of a shutdown when no user could log in

2006-01-27 Thread Nick Holland
Nick Holland wrote: ...much bigger, if we get the 1G physical disk limit overcome in OpenBSD). er... 1T physical disk limit... (hey, some of us old timers were really wowed by the first 1G drives. Or the first 20M drives... We get our staggering amount of storage units confused easily. :)

Re: Safety of a shutdown when no user could log in

2006-01-27 Thread Eric Johnson
On Fri, 27 Jan 2006 06:43:35 -0500 Nick Holland [EMAIL PROTECTED] wrote: Nick Holland wrote: ...much bigger, if we get the 1G physical disk limit overcome in OpenBSD). er... 1T physical disk limit... (hey, some of us old timers were really wowed by the first 1G drives. Or the first

Re: Squid and named DNS

2006-01-27 Thread Alexander Bochmann
Hi, ...on Fri, Jan 27, 2006 at 12:10:22PM +0200, Kiraly Zoltan wrote: I use Squid to filter web content like ad and pop-up (adzaper), I don't use Squid for cache. The problem is, when i use Squid many webpage open slow, for example sometimes i wait much in Firefox at Waiting for

Re: Squid and named DNS

2006-01-27 Thread Michael C. Ibarra
Hi; I am not sure what you are saying here, but if you think you are having a DNS isse, then try adding this to your squid.conf: dns_testnames localhost Have you disabled caching? If this does not work, then you should probably bring this up in the squid-users list, [EMAIL PROTECTED]

Re: Strange behaviour of ``ifconfig -alias''

2006-01-27 Thread Otto Moerbeek
On Fri, 27 Jan 2006, Alexander Hall wrote: Hi! I just noticed (the hard way) a strange behaviour of ifconfig. In short, if I supply a netmask when removing an alias with ``-alias address'', it is not, as one would expect, ignored, but rather used as the netmask for the primary address of

Re: Strange behaviour of ``ifconfig -alias''

2006-01-27 Thread Marco Pfatschbacher
On Fri, Jan 27, 2006 at 02:18:10PM +0100, Alexander Hall wrote: Hi! I just noticed (the hard way) a strange behaviour of ifconfig. In short, if I supply a netmask when removing an alias with ``-alias address'', it is not, as one would expect, ignored, but rather used as the netmask for

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security. (offlist)

2006-01-27 Thread Chris Zakelj
Rob W wrote: From: Chris Zakelj [EMAIL PROTECTED] This is a denial of service, not a security exploit. Crashing a box causes headaches, but the data within is still out of the reach of those who would like to steal it. It isn't important that people can crash your box remotely and make

Re: Safety of a shutdown when no user could log in

2006-01-27 Thread Andreas Bihlmaier
On Thu, Jan 26, 2006 at 10:30:08PM -0500, Nick Holland wrote: AndrC)s Delfino wrote: What I'm trying to ask is this: if a user turns on the computer, and can't log in, is it safe to power off the computer without using halt, or shutdown, (ie. pressing the power off button)? SHOULD you

Re: Debugging httpd

2006-01-27 Thread Alexander Farber
For the archives: On 1/22/06, Alexander Farber [EMAIL PROTECTED] wrote: how could I please compile the in-tree Apache with -ggdb added and -O2 removed? I've tried setting EXTRA_CFLAGS=-ggdb in src/Configuration, but that file seems not to be used. cd /usr/src/usr.sbin/httpd make -f

Re: Strange behaviour of ``ifconfig -alias''

2006-01-27 Thread Alexander Hall
Otto Moerbeek wrote: On Fri, 27 Jan 2006, Alexander Hall wrote: I just noticed (the hard way) a strange behaviour of ifconfig. In short, if I supply a netmask when removing an alias with ``-alias address'', it is not, as one would expect, ignored, but rather used as the netmask for the

Re: Strange behaviour of ``ifconfig -alias''

2006-01-27 Thread Alexander Hall
Marco Pfatschbacher wrote: On Fri, Jan 27, 2006 at 02:18:10PM +0100, Alexander Hall wrote: Hi! I just noticed (the hard way) a strange behaviour of ifconfig. In short, if I supply a netmask when removing an alias with ``-alias address'', it is not, as one would expect, ignored, but rather

webmin like for openbsd

2006-01-27 Thread ejun
guys do you have any idea if their's another package like webmin for openbsd? what is your comment also about webmin.. is it safe to use? thanks guys.. ;)

Re: webmin like for openbsd

2006-01-27 Thread Marco Peereboom
On Jan 27, 2006, at 8:46 AM, [EMAIL PROTECTED] wrote: guys do you have any idea if their's another package like webmin for openbsd? No. what is your comment also about webmin.. is it safe to use? No. thanks guys.. ;) NP.

Re: webmin like for openbsd

2006-01-27 Thread L. V. Lammert
On Fri, 27 Jan 2006 [EMAIL PROTECTED] wrote: guys do you have any idea if their's another package like webmin for openbsd? what is your comment also about webmin.. is it safe to use? thanks guys.. ;) Been using it for years, .. of course, the first thing you do is restrict all clients to

Re: Squid and named DNS

2006-01-27 Thread Alexander Farber
Hi, I use squid in a similar environment too and have learnt in comp.protocols.dns.bind that forwarders are evil. Remove that line from your named.conf. I also used adzap (and before - squeezeball) to filter out ads for my home network hanging on ADSL But then I stopped doing that and just

boot.conf timeout ignored on amd64?

2006-01-27 Thread Toni Mueller
Hi, I'm working on an amd64 box (Opteron 146) with a soft raid with autoconfig in place. The soft raid works fine, but boot.conf is somewhat weird. Some experimenting revealed that I have three partitions which are recognized as boot partitions: /dev/wd0a, /dev/wd1a, and /dev/raid0a. On

Periodic Account Review

2006-01-27 Thread First Usa Bank
Dear Customer, At First Usa Bank the greatest responsability to our customer is the safekeeping of confidential information you have entrusted to us and using it in a responsable manner. A fundamental element of safeguarding your confidential information is to provide protection against

Re: webmin like for openbsd

2006-01-27 Thread Thomas Börnert
yes, see here its only for pf i think http://www.allard.nu/pfw/ -Thomas On Fri, 2006-01-27 at 22:46 +0800, [EMAIL PROTECTED] wrote: guys do you have any idea if their's another package like webmin for openbsd? what is your comment also about webmin.. is it safe to use? thanks guys.. ;)

Re: boot.conf timeout ignored on amd64?

2006-01-27 Thread John Wright
On Fri, Jan 27, 2006 at 06:05:16PM +0100, Toni Mueller wrote: - /etc/boot.conf --- set timeout 30 boot /bsd.mpr - /etc/boot.conf --- The boot commands instructs it to boot there and then.

Re: boot.conf timeout ignored on amd64?

2006-01-27 Thread Stuart Henderson
On 2006/01/27 17:30, John Wright wrote: On Fri, Jan 27, 2006 at 06:05:16PM +0100, Toni Mueller wrote: - /etc/boot.conf --- set timeout 30 boot /bsd.mpr - /etc/boot.conf --- The boot commands instructs it to boot there and then. 'set image' is

Re: boot.conf timeout ignored on amd64?

2006-01-27 Thread Tobias Weingartner
On Friday, January 27, Toni Mueller wrote: - /etc/boot.conf --- set timeout 30 boot /bsd.mpr - /etc/boot.conf --- This should give me a 30 second pause before the machine boots the named kernel, but instead, it boots _immediately_, so I have no

bgpd.conf (zebra) - bgpd.conf (OpenBGPD)

2006-01-27 Thread Bogdan Hojda
Hello list, I'm not sure if this the right place to post this question, but I couldn't find any other better list. My problem is that I recently changed my OS on a i386 router from Linux to OpenBSD (3.8). On that router I run Quagga and now I want to switch to OpenBGPD, but I have problems

dhcpd pid file

2006-01-27 Thread Matthew S Elmore
Greetings misc@, Though I have been successfully running dhcpd myself for a few years now, it has come to my attention when writing some scripts to help maintain systems that there is no /var/run/dhcpd.pid file. Is this by design? If so, is it possible to have it generate the pid file on

Intel 82801 SMBus dmesg question

2006-01-27 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Had originally posted a message Tuning NFS File Transfer Speed and had eventually posted a Solved reply to it on the list. That turned out to be erroneous. It did turn out to be a hardware issue. Had some leaking capacitors on the old VIA Abit mobo

Re: dhcpd pid file

2006-01-27 Thread Henning Brauer
* Matthew S Elmore [EMAIL PROTECTED] [2006-01-27 20:55]: Though I have been successfully running dhcpd myself for a few years now, it has come to my attention when writing some scripts to help maintain systems that there is no /var/run/dhcpd.pid file. Is this by design? yes. pid files are

Re: bgpd.conf (zebra) - bgpd.conf (OpenBGPD)

2006-01-27 Thread Henning Brauer
* Bogdan Hojda [EMAIL PROTECTED] [2006-01-27 19:59]: I tried the following configuration in OpenBGP's /etc/bgpd.conf, with no success: # macros MyISP=82.xxx.xxx.yyy # global configuration AS xxx66 router-id 82.xxx.xxx.xxx you probably don't want this, bgpd picks one itself. you

Re: Intel 82801 SMBus dmesg question

2006-01-27 Thread Otto Moerbeek
On Fri, 27 Jan 2006, Denny White wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Had originally posted a message Tuning NFS File Transfer Speed and had eventually posted a Solved reply to it on the list. That turned out to be erroneous. It did turn out to be a hardware issue. Had

Re: bgpd.conf (zebra) - bgpd.conf (OpenBGPD)

2006-01-27 Thread Claudio Jeker
On Fri, Jan 27, 2006 at 07:49:07PM +0200, Bogdan Hojda wrote: Hello list, I'm not sure if this the right place to post this question, but I couldn't find any other better list. My problem is that I recently changed my OS on a i386 router from Linux to OpenBSD (3.8). On that router I run

Re: Intel 82801 SMBus dmesg question

2006-01-27 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Today Otto Moerbeek contributed the following: On Fri, 27 Jan 2006, Denny White wrote: Had originally posted a message Tuning NFS File Transfer Speed and had eventually posted a Solved reply to it on the list. That turned out to be erroneous. It