Re: OpenBSD PF IP Fragment Remote Denial Of Service

2006-02-01 Thread Dries Schellekens
Subcommander l0r3zz wrote: This came across security focus and I haven't seen it mentioned here. THey claim 3.8 is vulnerable, anybody know anything? This has been fixed in -current, 3.8-stable and 3.7-stable. This crash only works if you have 'scrub fragment crop' or 'scrub fragment

Re: OpenBSD PF IP Fragment Remote Denial Of Service

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 10:45:39AM +0100, MK wrote: Hello everybody I undersatnd that this issue doesn't affect many people even though I'd like to know about the problem. Is there any mailing list related to newly discovered security problems in OpenBSD? I know only about

Re: Fw: smp kernel

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 02:00:28AM +0200, [EMAIL PROTECTED] wrote: Begin forwarded message: Date: Tue, 31 Jan 2006 23:19:01 +0200 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: smp kernel hi! i am using OpenBSD_3_8 stable and i have intel-1386-pc with intel-p4-ht smp 3.2

Votre message à la liste linux est en attente d'approbation

2006-02-01 Thread linux-bounces
Votre courrier ` 'linux' dont l'objet est *FILENAME* MAIL SYSTEM ERROR - RETURNED MAIL est en attente jusqu'` ce que le modirateur de la liste puisse le consulter pour approbation. La raison de cette mise en attente : Envoi par un non-abonni sur une liste reservie aux abonnis

how to manage big pf-rulesets in a comfortable way

2006-02-01 Thread Joerg Streckfuss
Hi list, i need some hints to manage a pf ruleset of about more than 150 rules. In my company we want to design a firewall-cluster with about 10 interfaces. We plan to use two dell 1850 with two DFE-580TX quad port NIC's. Each interface points to a separate subnet. The cluster should use carp

Re: RAIDframe question

2006-02-01 Thread Håkan Olsson
On 1 feb 2006, at 08.38, Jurjen Oskam wrote: On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: raid0: Device already configured! ioctl (RAIDFRAME_CONFIGURE) failed Can anyone lend a hand in this important matter? Let me guess (since you didn't post any configuration): you enabled

Small pauses with a trunk(4) interface

2006-02-01 Thread Bruno Carnazzi
Hi all, I use OpenBSD/i386 3.8 with GENERIC.MP. I use a trunk interface based on 2 physical devices as you can see here : $ ifconfig -a lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33224 groups: lo inet 127.0.0.1 netmask 0xff00 inet6 ::1 prefixlen 128

Re: RAIDframe question

2006-02-01 Thread Peter
--- Ho?=kan Olsson [EMAIL PROTECTED] wrote: On 1 feb 2006, at 08.38, Jurjen Oskam wrote: On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: raid0: Device already configured! ioctl (RAIDFRAME_CONFIGURE) failed Can anyone lend a hand in this important matter? Let me guess

Re: smtp-vilter + spam filtering question

2006-02-01 Thread Paul Pruett
FYI, the version on the stable port is old, it is upto smtp-vilter-1.2.5 http://www.etc.msys.ch/software/smtp-vilter/ I was using monit to restart the port milter-spamd when it would die about one or two times a week, I downloaded 1.2.4 and did the make install - went non standard and set it

Re: how to manage big pf-rulesets in a comfortable way

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 12:28:33PM +0100, Joerg Streckfuss wrote: Hi list, i need some hints to manage a pf ruleset of about more than 150 rules. In my company we want to design a firewall-cluster with about 10 interfaces. We plan to use two dell 1850 with two DFE-580TX quad port NIC's.

Re: RAIDframe question

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 08:45:42AM -0500, Peter wrote: --- Ho?=kan Olsson [EMAIL PROTECTED] wrote: On 1 feb 2006, at 08.38, Jurjen Oskam wrote: On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: raid0: Device already configured! ioctl (RAIDFRAME_CONFIGURE) failed Can

Re: 3.9beta on macppc snapshot 30-01-06: no keyboard

2006-02-01 Thread Martin Reindl
Antoine Jacoutot [EMAIL PROTECTED] wrote: On Tue, 31 Jan 2006, Pete Vickers wrote: on my powerbook5,2 (G4 15), runs through booting fine, but at the install,upgrade,shell prompt, the keyboard doesn't work ( but shift still lights the LED) Hi. I've been experiencing the same

MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
Hi, I am trying to implement a MAC filter, based on OpenBSD Bridging facilities. One can read in BRCONFIG(8) man page: rule [rulespec] Add a filtering rule to an interface. Rules have a similar syn- tax to those in pf.conf(5). Rules can be used to selectively

Re: RAIDframe question

2006-02-01 Thread Greg Oster
=?ISO-8859-1?Q?H=E5kan_Olsson?= writes: On 1 feb 2006, at 08.38, Jurjen Oskam wrote: On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: raid0: Device already configured! ioctl (RAIDFRAME_CONFIGURE) failed Can anyone lend a hand in this important matter? Let me guess (since

Re: MAC filter Bridge

2006-02-01 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] What is bothering me is the sentence: Rules are processed in the order in which they were added to the interface, and the first rule matched takes the action ... Does this really mean that no hash function is used? I mean if I have 2 MAC Addresses and want

Re: RAIDframe question

2006-02-01 Thread Nick Bender
Side question: I tried unsuccessfully using the same procedure to set up two disks (sd0 and sd1) attached to a QLogic FibreChannel controller (isp driver). I probably don't have the correct terminology but upon startup the boot code could not be found (would not get beyond the point where

Re: MAC filter Bridge

2006-02-01 Thread Camiel Dobbelaar
On Wed, 1 Feb 2006, Badbanchi Hossein wrote: What is bothering me is the sentence: Rules are processed in the order in which they were added to the interface, and the first rule matched takes the action ... Does this really mean that no hash function is used? I mean if I have 2 MAC

Re: RAIDframe question

2006-02-01 Thread Peter Fraser
I had a disk drive fail while running RAIDframe. The system did not survive the failure. Even worse there was data loss. The system was to be my new web server. The system had 1 Gig of memory. I was working, slowly, on configuring apache and web pages. Moving to a chroot'ed environment was none

Re: clamshell ibook trackpad

2006-02-01 Thread linc
Hi Nick, Thanks for responding. Unfortunately I am only using base system window managers (twm and fvwm). I believe this is a new feature in the wsmouse or ams layer. But I haven't found any docco yet. Linc On Wed, 2006-02-01 at 00:25 -0500, Nick Guenther wrote: On 1/30/06, LINCOLN RUTLEDGE

mediawiki - php - apache

2006-02-01 Thread Jack Woehr
I'm confused ... I built /usr/ports/www/mediawiki but php (built automagically as a pre-req) doesn't seem to work in the server. Do I have to change the default OBSD 3.8 web server config (or chrooting) to run PHP stuff? -- Jack J. Woehr # Men never do evil so completely and PO

Re: MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
Hi, An alternative approach might be to turn off learning and discovery on the interface and add MAC addresses that are allowed to communicate statically. As a matter of fact I can add MACs supposed to be reached from each interface of the bridge, at the same time I update Bridge Rules. But this

Re: MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
Don't you already have problems if you have 20,000 nodes communicating on one flat broadcast domain already? OK. I was exaggerating! I have a little more than 2100 MACs. But even with this number, a sequential search doesn't seem to be acceptable. Regards, Amir

Re: RAIDframe question

2006-02-01 Thread Greg Oster
Peter writes: I tried unsuccessfully using the same procedure to set up two disks (sd0 and sd1) attached to a QLogic FibreChannel controller (isp driver). I probably don't have the correct terminology but upon startup the boot code could not be found (would not get beyond the point where the

Re: mediawiki - php - apache

2006-02-01 Thread Stuart Henderson
On 2006/02/01 09:54, Jack Woehr wrote: I'm confused ... I built /usr/ports/www/mediawiki but php (built automagically as a pre-req) doesn't seem to work in the server. Do I have to change the default OBSD 3.8 web server config (or chrooting) to run PHP stuff? Did you enable it with 'phpxs'

Re: Making FAT play nice

2006-02-01 Thread Alexander Hall
Nick Guenther wrote: I dual boot OpenBSD with Windows and have a third partition for data which is mounted on /home. The data partition is FAT32 since that's the only type that both OSes support well. I am not rally happy to use FAT partitions from OBSD. There has been recently fixed issues,

Re: RAIDframe question

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 11:02:22AM -0500, Peter Fraser wrote: I had a disk drive fail while running RAIDframe. The system did not survive the failure. Even worse there was data loss. The system was to be my new web server. The system had 1 Gig of memory. I was working, slowly, on

Re: Small pauses with a trunk(4) interface

2006-02-01 Thread Reyk Floeter
hi, On Wed, Feb 01, 2006 at 06:42:47PM +0400, Bruno Carnazzi wrote: I use OpenBSD/i386 3.8 with GENERIC.MP. trunk(4) support in OpenBSD 3.8 was quite new and there were some bugfixes and improvements during the last development cycle. these fixes, like trunkproto failover and multicast support

Re: RAIDframe question

2006-02-01 Thread Greg Oster
Peter Fraser writes: I had a disk drive fail while running RAIDframe. The system did not survive the failure. Even worse there was data loss. Ow. The system was to be my new web server. The system had 1 Gig of memory. I was working, slowly, on configuring apache and web pages. Moving to

Re: MAC filter Bridge

2006-02-01 Thread Tobias Weingartner
On Wednesday, February 1, Badbanchi Hossein wrote: Does this really mean that no hash function is used? I mean if I have 2 MAC Addresses and want to check **each packet** against this list serially, I suppose I had better forget about it! The immediate question that rises to the

Re: RAIDframe question

2006-02-01 Thread Peter Fraser
You havn't said what types of disks. I've had IDE disks fail that take down the entire system. I've had IDE disks fail but the system remains up and happy. I've had SCSI disks fail that have made the SCSI cards *very* unhappy (and had the system die shortly after). None of these

Re: MAC filter Bridge

2006-02-01 Thread Tobias Weingartner
On Wednesday, February 1, Badbanchi Hossein wrote: I intend to switch the traffic originating from unknown MACs to a quaranti ne subnet, connected to a third interface member of the bridge. Basing security policies on something as easily changable as a MAC address (and as public as a MAC

Re: RAIDframe question

2006-02-01 Thread Andy Hayward
On 2/1/06, Peter Fraser [EMAIL PROTECTED] wrote: But why was there a crash, I would of thought that the system should run after a disk failure. And even more to my surprise, about two days of my work disappeared. I believe, the disk drive died about 2 days before the crash. I also believe

Re: MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
Basing security policies on something as easily changable as a MAC address (and as public as a MAC address) is stupid. Thanks for the complement. Although this might seem (or actually BE) stupid in environments publicly accessible, but for a closed environment like our company LAN, this is

Re: RAIDframe question

2006-02-01 Thread Andy Hayward
On 2/1/06, Greg Oster [EMAIL PROTECTED] wrote: Peter Fraser writes: and as a result all file writes to the failed drive queued up in memory, I've never seen that behaviour... I find it hard to believe that you'd be able to queue up 2 days worth of writes without a) any reads being done

Re: mediawiki - php - apache

2006-02-01 Thread Jack Woehr
Thanks everyone for helping me get mediawiki started ... sorta ... but I have one problem left ... mysqld isn't installed. ports/www/mediawiki descended into ports/databases/mysql, but even though that dir *builds* the mysqld, it only installs the client. What do I have to do to get mysqld

Re: mediawiki - php - apache

2006-02-01 Thread Tobias Ulmer
On Wed, Feb 01, 2006 at 01:40:00PM -0700, Jack Woehr wrote: Thanks everyone for helping me get mediawiki started ... sorta ... but I have one problem left ... mysqld isn't installed. ports/www/mediawiki descended into ports/databases/mysql, but even though that dir *builds* the mysqld, it

Re: RAIDframe question

2006-02-01 Thread Greg Oster
Andy Hayward writes: On 2/1/06, Greg Oster [EMAIL PROTECTED] wrote: Peter Fraser writes: and as a result all file writes to the failed drive queued up in memory, I've never seen that behaviour... I find it hard to believe that you'd be able to queue up 2 days worth of writes

Re: Making FAT play nice

2006-02-01 Thread Nick Guenther
On 2/1/06, Alexander Hall [EMAIL PROTECTED] wrote: Nick Guenther wrote: I dual boot OpenBSD with Windows and have a third partition for data which is mounted on /home. The data partition is FAT32 since that's the only type that both OSes support well. I am not rally happy to use FAT

Re: Making FAT play nice

2006-02-01 Thread Stuart Henderson
On 2006/02/01 16:45, Nick Guenther wrote: /dev/wd0p /data msdos rw,-l,-m=777,nodev,nosuid,noauto 0 0 You can add switches like -m above. Ah! Thank you very much. That's exactly what I was looking for. That little detail isn't explicitly documented anywhere I could see. for future

Re: Fw: smp kernel

2006-02-01 Thread Nicholas Young
On Wed, Feb 01, 2006 at 02:00:28AM +0200, [EMAIL PROTECTED] wrote: Begin forwarded message: Date: Tue, 31 Jan 2006 23:19:01 +0200 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: smp kernel hi! i am using OpenBSD_3_8 stable and i have intel-1386-pc with intel-p4-ht smp 3.2

Windows CLI FTP and OBSD 3.9 ftp-proxy

2006-02-01 Thread Karl Kopp
Hi Everyone! I just upgraded one of our firewalls from 3.0 OBSD (I know, I know, I've been busy, for 4 years :) to 3.8 (which took 30 mins - LOVE that!). I've also added ftp-proxy from current to handle all our FTP connections. Things are working MUCH better now (browsers can hit FTP servers on

Re: MAC filter Bridge

2006-02-01 Thread Lars Hansson
On Wed, 1 Feb 2006 16:25:44 +0100 Badbanchi Hossein [EMAIL PROTECTED] wrote: Does this really mean that no hash function is used? I mean if I have 2 MAC Addresses and want to check **each packet** against this list serially, I suppose I had better forget about it! If you have 2 mac

Re: RAIDframe question

2006-02-01 Thread Nick Holland
Greg Oster wrote: Peter Fraser writes: I had a disk drive fail while running RAIDframe. The system did not survive the failure. Even worse there was data loss. Ow. Welcome to the REALITY of RAID. If you rely on RAID to always work, and never go down, you Just Don't Understand. ... You

Brain wash for live partition, or directory mirroring concept idea(s)?

2006-02-01 Thread Daniel Ouellet
Hi, I would like to try to break my teeth on a small ( hopefully) project that is missing for me in the OpenBSD kernel. A way to have live mirror of pre determine directory, or may be if that's easier to implement, full partition(s). The idea is to configure a directory on a master server

Re: Brain wash for live partition, or directory mirroring concept idea(s)?

2006-02-01 Thread Ray Lai
On Wed, Feb 01, 2006 at 11:37:19PM -0500, Daniel Ouellet wrote: snip This way, continuous live mirroring can be done and no need for cronjob, etc. And this would be much more efficient as well. snip https://marc.theaimsgroup.com/?l=openbsd-miscm=86187916316