Re: pre-orders

2006-03-08 Thread Julian Fondren
I assume the artwork as something to do with wavelan is a battlefield[1] :-) /me supplementing OpenBSD/macppc 'mini with similarly SFF[2] OpenBSD/x86. 1] my favorite /etc diff of the 3.9 snapshot. 2] system76.com's Koala Mini.

Re: pre-orders

2006-03-08 Thread Thomas Alexander Frederiksen
Theo de Raadt wrote: We have activated the pre-orders for OpenBSD 3.9... More information can be found at http://www.openbsd.org/39.html There's a T-shirt and a poster too... (The whole subject of the artwork will become more clear in a while, as we make more of it available

Trying to Compile L4-Kenge on current

2006-03-08 Thread Subcommander l0r3zz
I got it in my mind that I would use OpenBSD as my development system to do L$ (Microkernel ) work. But I'm having a problem with the binutils tools. Fisrst I needed the GNU nm utility (because the SCons environment executes an nm --radix=d varient ). Now I'm having problems with the linker. I

Re: Why packets are not blocked

2006-03-08 Thread Stuart Henderson
On 2006/03/07 23:08, Chris Zakelj wrote: Aye. You're flushing rules and NAT, but not your state table. Since the state is already established, rules aren't re-evaluated. Adding a state flush ought to get AOL wiped out. Just be mindful that if you have something going on (like an SSH

Consultants United - Welcome

2006-03-08 Thread Consultants United
We are pleased to invite you to review our business to business web site. Our home page is: http://www.consultantsunited.com Our site is designed to help people find and get in touch with Experts, Business Opportunities, Jobs, Articles, Events, News and Press Releases. Membership to access our

Re: pre-orders

2006-03-08 Thread Alexander Hall
Felix Kronlage wrote: On Wed, Mar 08, 2006 at 02:19:51AM -0600, Julian Fondren wrote: I assume the artwork as something to do with wavelan is a battlefield[1] :-) binary blobs do not only affect wireless, since nfe(4) is another case where one could use a binary blob from the vendor and

Re: hardening openbsd firewall

2006-03-08 Thread Tim Donahue
On Tuesday 07 March 2006 23:42, Peter wrote: Hi. I've set up several firewalls with OpenBSD but I have yet to go to any extremes regarding hardening. So far I have updated the source (stable), recompiled the system kernel, removed the source code, turned off inetd, and set up a tight

Re: sshfs on OpenBSD

2006-03-08 Thread Jonathan Weiss
Lars Hansson wrote: On Tue, 07 Mar 2006 19:59:43 -0800 smith [EMAIL PROTECTED] wrote: Are there any plans for an OpenBSD implementation of sshfs? Or has someone successfully installed fuse and sshfs on OpenBSD (preferably 3.8)? IIRC, fuse is pretty tied to the Linux kernel so porting it

Soekris VPN1411 seen but not used w/stock 3.8

2006-03-08 Thread Gordon Grieder
Hi, I recently picked up some Soekris gear for work. One part was a vpn1401 crypto accelerator. OpenBSD 3.8 fresh from the CD sees the card OK but won't use it. Quick script to turn userland crypto off and on with benchmarks proves that. I thought it may be a machine-dependant problem (it's for

Re: pre-orders

2006-03-08 Thread Gordon Grieder
On Tue, Mar 07, 2006 at 08:23:17PM -0700, Theo de Raadt wrote: We have activated the pre-orders for OpenBSD 3.9... W HO!!! It pays to order early! You stupid, cheap fuckers! Gord

Re: EPIA issues...

2006-03-08 Thread Steve Fairhead
Running 12V fans at 7V often works nicely (easily achieved with PC hardware by connecting the fan to 5V and 12V rather than 0V and 12V). With my electronics-designer cap on, I'd advise a little caution with this. The 5V regulator is designed to source, not sink, current. If the fan current

Re: sshfs on OpenBSD

2006-03-08 Thread michael hamerski
smith wrote: Are there any plans for an OpenBSD implementation of sshfs? Or has someone successfully installed fuse and sshfs on OpenBSD (preferably 3.8)? Yea, that would be very useful. Sadly, I have neither the skills nor the finances to fund someone possesing them. But I'll offer up

Re: Openbgpd kernel tuning

2006-03-08 Thread Marcel Prisi
Theo de Raadt a icrit : The idea is that you shouldn't need to change any options. Well then it will be easier than I thought :-) I read some old threads about too small tcp.sendspace / tcp.recvspace in 3.4 time that used to hit performance so I thought it would be useful. The others

Re: OBSD 3.8: bash, libiconv, libintl in rc.securelevel

2006-03-08 Thread Chris 'Xenon' Hanson
yary wrote: On 3/7/06, Chris 'Xenon' Hanson [EMAIL PROTECTED] wrote: yary wrote: Pardon me for giving what may be a naive answer, but how about putting /usr/local/lib into the LD_LIBRARY_PATH env variable before starting the wanrouter script? It's an obvious answer, but I figured there

Re: Openbgpd kernel tuning

2006-03-08 Thread Stuart Henderson
On 2006/03/08 16:37, Marcel Prisi wrote: OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable parameters using sysctl. net.inet.tcp.recvspace=65536 net.inet.tcp.sendspace=65536 kern.ipc.somaxconn=1024 net.inet.icmp.drop_redirect=1 net.inet.icmp.log_redirect=1

Re: Why packets are not blocked

2006-03-08 Thread Andrew Smith
Try flushing the state table too. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Sent: 08 March 2006 03:00 To: misc@openbsd.org Subject: Why packets are not blocked When my kid gets grounded I block the gameroom computer from getting to the

Re: Openbgpd kernel tuning

2006-03-08 Thread Theo de Raadt
I am in the process of setting up an OpenBSD / OpenBGPD core router for a small local ISP (two 20mbps upstreams, simple setup). OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable parameters using sysctl. The idea is that you shouldn't need to change any options.

Re: Why packets are not blocked

2006-03-08 Thread Joachim Schipper
On Tue, Mar 07, 2006 at 11:08:51PM -0500, Chris Zakelj wrote: Steven wrote: * Jim [EMAIL PROTECTED] [060307 20:36]: The problem is that if the kid is already logged into AOL Instant messenger, the connection is not broken. So even though she is grounded, she can still chat all day on

Re: Openbgpd kernel tuning

2006-03-08 Thread Henning Brauer
* Marcel Prisi [EMAIL PROTECTED] [2006-03-08 16:42]: OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable parameters using sysctl. the only thing you might want to change is net.inet.ip.ifq.maxlen the default is a little low for routing at higher speeds. 250 seems a good

New Job Openings in the Brighton Area

2006-03-08 Thread JOBS
Dear Jonathan: Thank you very much for your recent inquiry about job openings in the Brighton Area! We have new job openings in your area and would like to know if you are still available. If so, please let us know by clicking on the following link, or copy/paste the link into your web

Re: Openbgpd kernel tuning

2006-03-08 Thread Will H. Backman
Henning Brauer wrote: * Marcel Prisi [EMAIL PROTECTED] [2006-03-08 16:42]: OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable parameters using sysctl. the only thing you might want to change is net.inet.ip.ifq.maxlen the default is a little low for routing at higher

Re: Why packets are not blocked

2006-03-08 Thread Bryan Irvine
On 3/7/06, Jim [EMAIL PROTECTED] wrote: When my kid gets grounded I block the gameroom computer from getting to the internet. The script that runs is #!/bin/sh - cp /home/jmays/pf.conf.noGameroom /etc/pf.conf pfctl -F rules -f /etc/pf.conf pfctl -F nat -f /etc/pf.conf The script should

Re: hardening openbsd firewall

2006-03-08 Thread Joachim Schipper
On Tue, Mar 07, 2006 at 11:42:23PM -0500, Peter wrote: Hi. I've set up several firewalls with OpenBSD but I have yet to go to any extremes regarding hardening. So far I have updated the source (stable), recompiled the system kernel, removed the source code, turned off inetd, and set up a

Re: Trying to Compile L4-Kenge on current

2006-03-08 Thread Joachim Schipper
On Wed, Mar 08, 2006 at 12:42:27AM -0800, Subcommander l0r3zz wrote: I got it in my mind that I would use OpenBSD as my development system to do L$ (Microkernel ) work. But I'm having a problem with the binutils tools. Fisrst I needed the GNU nm utility (because the SCons environment executes

Sun Ultra 1

2006-03-08 Thread Gustavo Rios
Hey folks, i have just installed 3.8 in my sun desktop. It installed ok, 100% perfect. Know, i would like to strip the kernel to the bare minimum and get X working. have anybody in the list already configured the kernel and recompiled it? Could you send the two configuration files in order to me

Problem detecting fxp in March 2 snapshot

2006-03-08 Thread Daniel Hamlin
My Intel network card, which works under 3.8, is not detected in the March 2 snapshot (I tried some previous snapshots as well, same issue). Any hints or suggestions would be appreciated! Dan Hamlin OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005 [EMAIL

Re: Openbgpd kernel tuning

2006-03-08 Thread Henning Brauer
* Will H. Backman [EMAIL PROTECTED] [2006-03-08 19:17]: Henning Brauer wrote: * Marcel Prisi [EMAIL PROTECTED] [2006-03-08 16:42]: OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable parameters using sysctl. the only thing you might want to change is

Re: Problem detecting fxp in March 2 snapshot

2006-03-08 Thread Miod Vallat
My Intel network card, which works under 3.8, is not detected in the March 2 snapshot (I tried some previous snapshots as well, same issue). Any hints or suggestions would be appreciated! Looks like a fuck-up on our side for 3.9. Can you try the following diff and report whether your

Re: hardening openbsd firewall

2006-03-08 Thread Bob Beck
* Joachim Schipper [EMAIL PROTECTED] [2006-03-08 12:13]: 1. Use sudo exclusively - set an empty or nonsense root password Stupid - if there is only one user with sudo-ability then this is the same as just having root. if there are more, there are now two passwords out there to get

Re: OBSD 3.8: bash, libiconv, libintl in rc.securelevel

2006-03-08 Thread Otto Moerbeek
On Wed, 8 Mar 2006, Chris 'Xenon' Hanson wrote: Thanks everyone! Leaves me wondering why you cannot use ksh to run the script. Are you running into a ksh bug or a bash specific feature? -Otto

Re: OBSD 3.8: bash, libiconv, libintl in rc.securelevel

2006-03-08 Thread Chris 'Xenon' Hanson
Otto Moerbeek wrote: On Wed, 8 Mar 2006, Chris 'Xenon' Hanson wrote: Thanks everyone! Leaves me wondering why you cannot use ksh to run the script. Are you running into a ksh bug or a bash specific feature? I honestly don't know, I didn't write the script, Sangoma did. It calls for bash,

Re: Openbgpd kernel tuning

2006-03-08 Thread Chris Cappuccio
Marcel Prisi [EMAIL PROTECTED] wrote: I read some old threads about too small tcp.sendspace / tcp.recvspace in 3.4 time that used to hit performance so I thought it would be useful. These settings only affect TCP sessions that connect directly to that system. In other words, they don't do

Re: OBSD 3.8: bash, libiconv, libintl in rc.securelevel

2006-03-08 Thread Otto Moerbeek
On Wed, 8 Mar 2006, Chris 'Xenon' Hanson wrote: Otto Moerbeek wrote: On Wed, 8 Mar 2006, Chris 'Xenon' Hanson wrote: Thanks everyone! Leaves me wondering why you cannot use ksh to run the script. Are you running into a ksh bug or a bash specific feature? I honestly don't know, I

Re: Openbgpd kernel tuning

2006-03-08 Thread Matt Rowley
monitoring the congestion counter in pfctl -si helps a lot. you don't want too long queues tho, that is contraproductive. What are the consequences of ifq set too large? --Matt

Re: Sun Ultra 1

2006-03-08 Thread Daniel Ouellet
Gustavo Rios wrote: Know, i would like to strip the kernel to the bare minimum and get X working. have anybody in the list already configured the kernel and recompiled it? http://openbsd.org/faq/faq5.html#Why

Re: *** SPAM *** This is NOT a complaint (or any other flavour of whining)

2006-03-08 Thread Rod.. Whitworth
On Wed, 8 Mar 2006 15:05:35 -, Andrew Smith wrote: Rod, you didn't mention the architecture... for now I'll assume i386. You also didn't mention if it was an upgrade over a 3.8 or a clean 3.9 install. I'll assume a 3.9 clean install. Double check that you have machdep.allowaperture=2 in

Re: Problem detecting fxp in March 2 snapshot

2006-03-08 Thread Hamlin, Daniel N
-Original Message- From: Miod Vallat [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 3:45 PM To: Hamlin, Daniel N Cc: misc@openbsd.org Subject: Re: Problem detecting fxp in March 2 snapshot My Intel network card, which works under 3.8, is not detected in the March 2

Pre-orders for our releases.

2006-03-08 Thread Theo de Raadt
I would like to remind our community that our project lives and breathes because of the sale of CDs and the receipt of donations. In the last few years a few very large donations have allowed our hackathons to happen, but other than that we are always digging ourself a bigger and bigger hole.

Re: Openbgpd kernel tuning

2006-03-08 Thread Ted Unangst
On 3/8/06, Matt Rowley [EMAIL PROTECTED] wrote: monitoring the congestion counter in pfctl -si helps a lot. you don't want too long queues tho, that is contraproductive. What are the consequences of ifq set too large? packets go in the queue and don't come out.

Re: ,,improve'' readability in tree(3)

2006-03-08 Thread chefren
On 03/08/06 23:33, Thorsten Glaser wrote: Peter Valchev dixit: lg - log No, the original is correct. lg means log base 2. Isn't that lb? http://en.wikipedia.org/wiki/Logarithm ld ? +++chefren

Re: OptiPlex GX620n - OpenBSD

2006-03-08 Thread Mark Pecaut
On 3/7/06, Nick Holland [EMAIL PROTECTED] wrote: You prompted me to go back and take another shot at X on a Optiplex 620. I've (again) had no luck getting it to work with the standard, on-board video. What did you do to configure X on it? (I didn't see an extra video card in your dmesg).

Re: hardening openbsd firewall

2006-03-08 Thread Joachim Schipper
On Wed, Mar 08, 2006 at 01:58:18PM -0700, Bob Beck wrote: * Joachim Schipper [EMAIL PROTECTED] [2006-03-08 12:13]: 1. Use sudo exclusively - set an empty or nonsense root password Stupid ... 2. Use public key authentication only for sshd(8), and restrict which users can

Re: Soekris VPN1411 seen but not used w/stock 3.8

2006-03-08 Thread Gordon Grieder
On Wed, Mar 08, 2006 at 06:07:30PM -0500, jared r r spiegel wrote: including the commandlines of said benchmarks would have been hot, in this case. i'm inclined to ask how you determined the benchmarks prove that it isn't used ( watching 'systat vmstat', time(1)'ing them, etc ),

Re: OBSD 3.8: bash, libiconv, libintl in rc.securelevel

2006-03-08 Thread Giancarlo Razzolini
Otto Moerbeek wrote: On Wed, 8 Mar 2006, Chris 'Xenon' Hanson wrote: Otto Moerbeek wrote: On Wed, 8 Mar 2006, Chris 'Xenon' Hanson wrote: Thanks everyone! Leaves me wondering why you cannot use ksh to run the script. Are you running into a ksh bug or a bash specific feature? I honestly

Re: Soekris VPN1411 seen but not used w/stock 3.8

2006-03-08 Thread jared r r spiegel
On Wed, Mar 08, 2006 at 06:29:47PM -0600, Gordon Grieder wrote: On Wed, Mar 08, 2006 at 06:07:30PM -0500, jared r r spiegel wrote: including the commandlines of said benchmarks would have been hot, in this case. The speed with and without userland crypto enabled was the same for

Re: EPIA issues...

2006-03-08 Thread michael hamerski
Steve Fairhead wrote: ... snip... Summary: with small fans, it should work, but you've introduced a mechanism whereby a fan failure could destroy the machine. Aha, I just knew there was more to my attraction to the zalman fan mate than my instinctive aversion to electricity since staying

Re: Soekris VPN1411 seen but not used w/stock 3.8

2006-03-08 Thread Gordon Grieder
On Wed, Mar 08, 2006 at 07:59:02PM -0500, jared r r spiegel wrote: only thing i guess i can offer is: http://marc.theaimsgroup.com/?l=openbsd-miscm=108215148805896w=2 and to say that i've used a 1401 on a desktop and 1411s in soekris 4801s without issue(*) from 3.7 on up to the

Re: Soekris VPN1411 seen but not used w/stock 3.8

2006-03-08 Thread Theo de Raadt
On Wed, Mar 08, 2006 at 07:59:02PM -0500, jared r r spiegel wrote: only thing i guess i can offer is: http://marc.theaimsgroup.com/?l=openbsd-miscm=108215148805896w=2 and to say that i've used a 1401 on a desktop and 1411s in soekris 4801s without issue(*) from 3.7 on up to

Re: Sun Ultra 1

2006-03-08 Thread Joe S
Gustavo Rios wrote: Hey folks, i have just installed 3.8 in my sun desktop. It installed ok, 100% perfect. Know, i would like to strip the kernel to the bare minimum and get X It sounds like you come from Linux, where kernels are bloated. OpenBSD is not like Linux. The OpenBSD kernel is not

Fw: Why packets are not blocked - thanks

2006-03-08 Thread Jim
Thanks to all who helped solve this problem. It has been very educational for me. I knew I could find the answer here... as always. Jim

Fw: Why packets are not blocked

2006-03-08 Thread Jim
If I were her, and I saw these rules, I would just change my IP with ifconfig :D two problems here. 1. she is not smart enough 2. dhcpd is configured to look at her mac address and always assign this ip. cheers. Jim

Re: BSD Portal

2006-03-08 Thread Neil Woods
[EMAIL PROTECTED] writes: For your information, the bsdportal which used to be at metawire.org/~liamfoy/bsdportal has changed to more reliable hosting at: liamjfoy.freeshell.org Update your bookmarks! Thanks! Thanks. So it seems I'm not the only one have problems accessing

Re: Fw: Why packets are not blocked

2006-03-08 Thread shanejp
Hey Jim, Quoting Jim [EMAIL PROTECTED]: If I were her, and I saw these rules, I would just change my IP with ifconfig :D two problems here. 1. she is not smart enough I hope you mean, she is not knowledgeable enough. Shane

Re: Brain wash for live partition, or directory mirroring concept idea(s)?

2006-03-08 Thread Ted Unangst
On 2/2/06, Ted Unangst [EMAIL PROTECTED] wrote: On 2/2/06, Ted Unangst [EMAIL PROTECTED] wrote: you could start here: http://marc.theaimsgroup.com/?l=openbsd-techm=108663340015236w=2 i suppose the link would be more useful if you could get the code. if somebody is seriously interested (as

Re: Openbgpd kernel tuning

2006-03-08 Thread Henning Brauer
* Ted Unangst [EMAIL PROTECTED] [2006-03-08 23:28]: On 3/8/06, Matt Rowley [EMAIL PROTECTED] wrote: monitoring the congestion counter in pfctl -si helps a lot. you don't want too long queues tho, that is contraproductive. What are the consequences of ifq set too large? packets go in the