Re: RFC 2348 in libexec/tftpd

2006-03-28 Thread jared r r spiegel
On Tue, Mar 28, 2006 at 09:31:01AM +0530, Siju George wrote: Wow! This was not the impression I got from http://packages.debian.org/stable/net/tftp-hpa which says - HPA's tftp client This is a tftp client derived from OpenBSD tftp with some extra options added

sudo nopasswd rm

2006-03-28 Thread Marco Fretz
hello i've got a little problem. i have to remove some files in a shell script that or not owned or writable by the user the shell script runs. is there a way to give this user write access only to the files needed to remove by the shell script (with sudo nopasswd)? thanks and kind regards

Re: Realtek RTL8201CL NIC support

2006-03-28 Thread Stuart Henderson
On 2006/03/27 23:00, Peter Valchev wrote: Acer Labs M5263 LAN rev 0x50 at pci0 dev 27 function 0 not configured this definitely does not look like a realtek; the realtek part number is a PHY. some references seem to suggest a tulip. you could try to see if this does anything (try both

Re: VPN SA expires in a minute

2006-03-28 Thread Toni Mueller
Hello, On Sun, 26.03.2006 at 22:45:15 +0200, HEINER Piter [EMAIL PROTECTED] wrote: I tried setting these with isakmpd.conf and sysctls, here's some I can't remember using sysctl for VPN tuning so far. Default-phase-1-lifetime= 28800,60:28800 Default-phase-2-lifetime= 28800,60:28800

Horde/Kronolith - chroot issues?

2006-03-28 Thread Nick Holmes
Dear All, I am now desperately in need of a online calendaring solution and need to be able to manage multiple appointments and most importantly have an at-a-glance busy time view. I've looked at a number of php/perl scripts that do most of what I need, but on looking at Kronolith this seems

Re: Horde/Kronolith - chroot issues?

2006-03-28 Thread Andreas Vögele
Nick Holmes wrote: Has anyone else got Kronolith running on chroot'd Apache in OpenBSD (I am running -CURRENT)? Is it relatively easy or utterly painful? Is there any advice that can be given or openbsd/chroot specfic caveats I must be aware of before I start installing the Horde Framwork and

Re: ant-junit and ANT_HOME help

2006-03-28 Thread MikeG
Hi, junit.jar is in the classpath but removing it (once the test classes are built) doesn't help, I get the exact same error. I can make it work using the java tag to lanuch junit but this isn't so flexible. The error and the example ant file that produces it is below. build/classes/hello

Re: sudo nopasswd rm

2006-03-28 Thread Nick Holland
Marco Fretz wrote: hello i've got a little problem. i have to remove some files in a shell script that or not owned or writable by the user the shell script runs. is there a way to give this user write access only to the files needed to remove by the shell script (with sudo nopasswd)? With

Re: sudo nopasswd rm

2006-03-28 Thread MikeG
You only need write access to the directory to delete files (unless the sticky bit is set). Make the dir writable by a group the shell script runs as. Mike Marco Fretz wrote: hello i've got a little problem. i have to remove some files in a shell script that or not owned or writable by

pf and passive (ftp) port tricks

2006-03-28 Thread Michael Schmidt
Hello, did anyone setup helpful tricks in pf concerning passive ports for ftp? Why I am asking has the following reason: In general you have to open ports for incoming passive ftp requests on a wide range, but that4s a point I don4t like as I want to make life as hard as possible for

Re: ant-junit and ANT_HOME help

2006-03-28 Thread MikeG
btw, I fixed the refid error on line 20 and the problem still persists with all classpath combinations: classpath refid=testclasspath.ref/ MikeG wrote: Hi, junit.jar is in the classpath but removing it (once the test classes are built) doesn't help, I get the exact same error. I can make

Re: pf and passive (ftp) port tricks

2006-03-28 Thread Michael Schmidt
Michael Schmidt wrote: Hello, did anyone setup helpful tricks in pf concerning passive ports for ftp? Why I am asking has the following reason: In general you have to open ports for incoming passive ftp requests on a wide range, but that4s a point I don4t like as I want to make life as

Re: pf and passive (ftp) port tricks

2006-03-28 Thread David Elze
Am Dienstag, den 28.03.2006, 14:09 +0200 schrieb Michael Schmidt: Hi, So what I want to setup is pf and the ftp-daemon in that way that the ftp-daemon offers only a very small range of passive ports (or perhaps only one single passive port?) and that pf opens only the same small range of

OpenSSH funding: Mark Shuttleworth?

2006-03-28 Thread Constantine A. Murenin
Has anyone contacted Mark Shuttleworth for OpenSSH funding? I think there is a very high probability that he would be happy to help OpenSSH, maybe even pay someone fulltime to work on it... (I remember from the beginning of 2004 that Shuttleworth was paying some bugzilla developer such as to quit

Re: iich4 sound card problem on OpenBSD 3.8 / 3.9

2006-03-28 Thread Jonathan Gray
On Tue, Mar 28, 2006 at 08:22:08AM +0200, Szymon wrote: dmseg auich0 at pci0 dev 31 function 5 Intel 82801DB AC97 rev 0x03pci_intr_map: no mapping for pin B Notebook ASUS A3L Interrupt routing problems. There is no chance of people being able to help without a full dmesg.

driver blobs: systrace-able (or something like it)?

2006-03-28 Thread dick
having had a gander at the 3.9 song, which is quite amusing, i had an idea that might be useful and i suspect it is ill-conceived. i have the utmost confidence that readers of misc@ can quickly elucidate why it is a stupid idea. if the integrity of closed-source binary blob drivers is

Re: driver blobs: systrace-able (or something like it)?

2006-03-28 Thread Reyk Floeter
[EMAIL PROTECTED] wrote: having had a gander at the 3.9 song, which is quite amusing, i had an idea that might be useful and i suspect it is ill-conceived. i have the utmost confidence that readers of misc@ can quickly elucidate why it is a stupid idea. if the integrity of closed-source binary

Re: Realtek RTL8201CL NIC support

2006-03-28 Thread Leonardo Rodrigues
the realtek part number is a PHY. Yep. The (in)famous wikipedia told me that. (http://en.wikipedia.org/wiki/PHYceiver) some references seem to suggest a tulip. you could try to see if this does anything (try both de(4) and dc(4) in your kernel), but no high hopes. I'll try it later when I

Re: sudo nopasswd rm

2006-03-28 Thread Darrin Chandler
Marco Fretz wrote: i've got a little problem. i have to remove some files in a shell script that or not owned or writable by the user the shell script runs. is there a way to give this user write access only to the files needed to remove by the shell script (with sudo nopasswd)? In

Re: login.conf for securing ftp

2006-03-28 Thread Joachim Schipper
On Mon, Mar 27, 2006 at 05:54:50PM +0100, Mike Gould wrote: Ok I realised I asked the question the wrong way round. Anyone prepared to say that this looks ok? :) No, but I don't see any obvious flaws, aside from ssh via private/public keys or somesuch, but you are already aware of that.

Re: Problem: Multiple alias{...} statements in dhclient.conf

2006-03-28 Thread Joachim Schipper
On Mon, Mar 27, 2006 at 06:51:33PM +0200, Andreas Bihlmaier wrote: Hello misc@, I finally got around to setup a dhcpd in my local LAN. All hosts get their IP by dhcp, but also need an alias (as secure VPN inside LAN) on each interface, after playing around with /etc/hostname.iface I found

Re: ant-junit and ANT_HOME help

2006-03-28 Thread Jeremy Huiskamp
On 28-Mar-06, at 6:35 AM, MikeG wrote: Hi, junit.jar is in the classpath but removing it (once the test classes are built) doesn't help, I get the exact same error. Why are you removing it? It needs to be on the classpath during compile and while you run the tests. How is junit

Re: 3.9 song released

2006-03-28 Thread Michael Hernandez
On Mar 27, 2006, at 11:43 PM, Roland Dominguez wrote: Love that retro sound! My favorite so far! :)

Re: pf and passive (ftp) port tricks

2006-03-28 Thread Per-Olov Sjöholm
On Tuesday 28 March 2006 14.09, Michael Schmidt wrote: Hello, did anyone setup helpful tricks in pf concerning passive ports for ftp? Why I am asking has the following reason: In general you have to open ports for incoming passive ftp requests on a wide range, but that4s a point I don4t

Re: sudo nopasswd rm

2006-03-28 Thread Ingo Schwarze
MikeG wrote on Tue, Mar 28, 2006 at 01:00:32PM +0100: Marco Fretz wrote: i've got a little problem. i have to remove some files in a shell script that are not owned or writable by the user the shell script runs. You only need write access to the directory to delete files (unless the

Re: ant-junit and ANT_HOME help

2006-03-28 Thread Jacob Grydholt Jensen
... path id=testclasspath.ref pathelement location=${class.dir}/ pathelement location=${testclass.dir}/ !-- pathelement location=/usr/local/lib/java/ant/ant-junit.jar/ pathelement location=${lib.dir}/junit.jar/ -- /path Are you trying to confuse us by showing

Re: OpenSSH funding: Mark Shuttleworth?

2006-03-28 Thread nick thompson
Constantine A. Murenin wrote: Has anyone contacted Mark Shuttleworth for OpenSSH funding? I think there is a very high probability that he would be happy to help OpenSSH, maybe even pay someone fulltime to work on it... (I remember from the beginning of 2004 that Shuttleworth was paying some

Re: OpenSSH funding: Mark Shuttleworth?

2006-03-28 Thread Randal L. Schwartz
nick == nick thompson [EMAIL PROTECTED] writes: nick Sure sounds like a good idea to me. Since OpenSSH is such a vital part nick of a linux distribution (or any unix like os) , I would imagine nick Mr. Shuttleworth would be inclined to want it's development to continue. Probably want to go

ath(4) with AR5213 and rf2112a

2006-03-28 Thread Alexander Hall
Hi all, I just happily returned from a local vendor with a Netgear WG511T which, acording to http://www.openbsd.org/i386.html should work. I know about the issues with changing specifications and of course this seems to have bit me (and others, as the archives show) in the ass. -

Multiple pppoe sessionst through one nic (howto fake mac)

2006-03-28 Thread Chris C.
Hi, I've two dsl providers but only one line and only one nic in my router. I want to switch this router from Linux to OpenBSD (I've been using OpenBSD for 1 year before as my Mailserver). But there's one question apparently no one could answer: Is it possible to send different MAC-Addresses

Re: iich4 sound card problem on OpenBSD 3.8 / 3.9

2006-03-28 Thread Blair Sadewitz
On 3/28/06, Szymon [EMAIL PROTECTED] wrote: dmseg auich0 at pci0 dev 31 function 5 Intel 82801DB AC97 rev 0x03pci_intr_map: no mapping for pin B Notebook ASUS A3L Have you tried setting Plug and Play OS to NO in the BIOS?

nfe(4) on amd64 (Asus A8N-E) update

2006-03-28 Thread Blair Sadewitz
IT WORKS NOW! The problem was one or more of the following: --The hardware has problems communicating with certain [half-duplex] 10Base-T devices. --The driver has issues with [half-duplex] 10-BaseT devices. --My half-duplex 10BaseT hub is bad. Has anyone here used--especially on an Asus

Re: Sendmail security problem

2006-03-28 Thread Brian A. Seklecki
On Fri, 24 Mar 2006, Joachim Schipper wrote: On Fri, Mar 24, 2006 at 02:14:50PM +, Stuart Henderson wrote: On 2006/03/24 14:12, Alexander Bochmann wrote: ...on Thu, Mar 23, 2006 at 12:22:37PM +0100, Anthony Howe wrote: P gnu/usr.sbin/sendmail/libsm/refill.c P

Re: kernel panic in ieee80211_release_node while using ral0 (Ralink RT2561S)

2006-03-28 Thread Karel Gardas
Hello, I'm happy to write that after upgrading to 3.9-current (today's sources) the problem goes away and now I'm able to either associate or to provide host AP. Thanks to the developer who fixed this issue! Karel On Sun, 26 Mar 2006, Karel Gardas wrote: Hello, someone notified me to

QoS with Multiple VLANs + HTTP Proxy

2006-03-28 Thread Jason Dixon
I have a site with an OpenBSD firewall pair routing 12 internal VLANs (11 client networks, 1 DMZ). All of the client HTTP traffic is redirected to a Squid proxy on the DMZ. I'm using altq with cbq for queuing all of the outbound traffic, but I can't seem to wrap my head around a good way

LinuxWorld Boston 2006 - Secure Network Architectures with OpenBSD

2006-03-28 Thread Jason Dixon
I will be presenting a new talk on OpenBSD next week at the OpenSolutions World Conference. This is a new series of sessions held in conjunction with LinuxWorld in Boston that focus on OSS technologies that are not necessarily Linux-centric. My talk is part of the Security track and will

Re: more re: nfs openbsd setattr bug

2006-03-28 Thread Daniel E. Hassler
Messing with atime mtime like that will really confuse forensics folks. Could lead to false accusations. Otto Moerbeek wrote: On Tue, 28 Mar 2006, [EMAIL PROTECTED] wrote: I've run the little test script and it seemed to be fixed after I had patched my server to set VA_UTIMES_NULL when

Re: QoS with Multiple VLANs + HTTP Proxy

2006-03-28 Thread Jason Dixon
On Mar 28, 2006, at 4:10 PM, Jon Simola wrote: With the current ruleset, clients are properly assigned to the http_out queue, but then the connection from the proxy is going to duplicate their traffic in altq. Even if don't queue outbound traffic from the proxy, the packets are going to be

Re: VPN SA expires in a minute

2006-03-28 Thread Peter Heiner
I tried setting these with isakmpd.conf and sysctls, here's some I can't remember using sysctl for VPN tuning so far. I did that because I couldn't find any reference to enforce both time and volume limits. Believe me, I Googled my ass sore trying. Default-phase-1-lifetime=28800,60:28800

ram not shown

2006-03-28 Thread Alex Stamatis
Hallo Misc. I have (real mem = 167354368 (163432K)) as shown in dmesg ... The weird part is that in top it shows Memory: Real: 56M/78M act/tot Why does this happen ? Does it really only use 78 mbyte of ram even though the system sees the rest of it in dmesg or is it just a bug in the top

Re: QoS with Multiple VLANs + HTTP Proxy

2006-03-28 Thread Joachim Schipper
On Tue, Mar 28, 2006 at 04:23:51PM -0500, Jason Dixon wrote: On Mar 28, 2006, at 4:10 PM, Jon Simola wrote: With the current ruleset, clients are properly assigned to the http_out queue, but then the connection from the proxy is going to duplicate their traffic in altq. Even if don't queue

Re: ram not shown

2006-03-28 Thread Joachim Schipper
On Wed, Mar 29, 2006 at 12:50:33AM +0300, Alex Stamatis wrote: Hallo Misc. I have (real mem = 167354368 (163432K)) as shown in dmesg ... The weird part is that in top it shows Memory: Real: 56M/78M act/tot Why does this happen ? Does it really only use 78 mbyte of ram even though the

Dynamically update DNS info in DHCPD.CONF

2006-03-28 Thread Peter Bako
Is there any way to get the DHCPD.CONF file be set to use the DNS information from the resolv.conf file? Specifically I have a case where my firewall's outside interface gets its IP address via DHCP from the ISP. When I initially setup the firewall I put their DNS IP numbers into my conf file

Re: Dynamically update DNS info in DHCPD.CONF

2006-03-28 Thread Nick Guenther
On 3/28/06, Peter Bako [EMAIL PROTECTED] wrote: Is there any way to get the DHCPD.CONF file be set to use the DNS information from the resolv.conf file? Specifically I have a case where my firewall's outside interface gets its IP address via DHCP from the ISP. When I initially setup the

Re: Dynamically update DNS info in DHCPD.CONF

2006-03-28 Thread Jeff Quast
On 3/28/06, Peter Bako [EMAIL PROTECTED] wrote: Is there any way to get the DHCPD.CONF file be set to use the DNS information from the resolv.conf file? nms=`awk '{ if ($1 == nameserver) print $2 }' /etc/resolv.conf` nms=`echo $nms | sed 's/ /, /g'` sed -n

In Asia, where can i buy the cd sets/posters/t-shirts?

2006-03-28 Thread Michael Bibby
http://www.openbsd.org/orders.html#asia I sent a mail to [EMAIL PROTECTED], ask if they still sell OpenBSD's cd set/porters/t-shirts, but they havn't answered me(for about 20 days so far). Any other store in Asia? By the way, how to become an 'offical' web store to sell OpenBSD's cd

Re: QoS with Multiple VLANs + HTTP Proxy

2006-03-28 Thread Jon Simola
On 3/28/06, Jason Dixon [EMAIL PROTECTED] wrote: I have a site with an OpenBSD firewall pair routing 12 internal VLANs (11 client networks, 1 DMZ). All of the client HTTP traffic is redirected to a Squid proxy on the DMZ. I'm using altq with cbq for queuing all of the outbound traffic, but I

Re: arpbalance + pfsync

2006-03-28 Thread Jason Stubbs
Jason Stubbs wrote: Ryan McBride wrote: On Mon, Mar 27, 2006 at 12:32:31PM +0900, Jason Stubbs wrote: Same main question as in the last thread I posted to, but without any of the distractions. Can a pair of redundant firewalls be used with arpbalance without being affected by the state race?

Re: ADSL with pppoa (over ATM)

2006-03-28 Thread Daniel Walrond
Hello, On Tue, Mar 21, 2006 at 08:21:40PM +0100, Luca Losio wrote: I read the faq searching for info about pppoa (http://www.openbsd.org/faq/faq6.html) : The main software interface to PPPoE/PPPoA on OpenBSD is pppoe(8), which is a userland implementation (in much the same way that we

Re: nfe(4) on amd64 (Asus A8N-E) update

2006-03-28 Thread Jonathan Gray
On Tue, Mar 28, 2006 at 12:41:04PM -0500, Blair Sadewitz wrote: IT WORKS NOW! The problem was one or more of the following: --The hardware has problems communicating with certain [half-duplex] 10Base-T devices. --The driver has issues with [half-duplex] 10-BaseT devices. --My half-duplex

Re: Dynamically update DNS info in DHCPD.CONF

2006-03-28 Thread NetNeanderthal
On 3/28/06, Nick Guenther [EMAIL PROTECTED] wrote: Well you could always script it: #dhcpmeep.py chop after it. Of course, it does this in a very bad (and untested) way, but you get the idea. [EMAIL PROTECTED] ~]$ man -k python python: nothing appropriate

Re: IDS solution

2006-03-28 Thread Daniel Cid
You didn't mention if you are only looking for NIDS, so I will suggest the ossec hids to you. I have been using it very sucessfully and it has been much more useful the any NIDS that I have ever used (just to be fair, I'm the developer of this project, but I know some ISPs and companies that use

Re: Dynamically update DNS info in DHCPD.CONF

2006-03-28 Thread Nick Guenther
On 3/29/06, NetNeanderthal [EMAIL PROTECTED] wrote: after it. Of course, it does this in a very bad (and untested) way, but you get the idea. [EMAIL PROTECTED] ~]$ man -k python python: nothing appropriate Well you'd either install python or translate it first, obviously. Python is just

Re: Dynamically update DNS info in DHCPD.CONF

2006-03-28 Thread Isaac Levy
Hi there, On 3/28/06, NetNeanderthal [EMAIL PROTECTED] wrote: On 3/28/06, Nick Guenther [EMAIL PROTECTED] wrote: Well you could always script it: #dhcpmeep.py chop after it. Of course, it does this in a very bad (and untested) way, but you get the idea. [EMAIL PROTECTED] ~]$ man

Re: openbsd and the money

2006-03-28 Thread Roger Neth Jr
On 3/28/06, Daniel Walrond [EMAIL PROTECTED] wrote: On Thu, Mar 23, 2006 at 03:09:08PM +0100, frantisek holop wrote: twice a year (or maybe more) when it comes to money issues, Theo and the devs ask for donations, cd purchases. at the same time, people are every once in a while reminded