Re: dd ... of=/dev/sd0 creates a file instead of writing to disk

2006-06-14 Thread viq
On Tuesday 13 June 2006 21:14, Joe wrote: I've having a problem understanding how to write data to a disk. I want to wipe an old hard drive before getting rid of it. I have attached the hard drive to my system via usb. Normally, this would work (in different OS's): # dd if=/dev/urandom

CARP + OpenBGPd, fail-over

2006-06-14 Thread Thomas Bader
Hi all I got a setup with two OpenBSD boxes which both do a BGP-peering to our upstream internet provider and both provide redundancy to our internal LANs with CARP and pfsync. The setup looks like the following: | $ext_if | $ext_if | (with BGP)| (with BGP)

Re: Hifn policy on documentation

2006-06-14 Thread Alexander Hall
I second Mr. NetNeanderthal's opinions. Kudos to him for being clear and non-abusive. /Alexander NetNeanderthal wrote: On 6/13/06, Hank Cohen [EMAIL PROTECTED] wrote: Folks, There has been some discussion of late on this list about Hifn's policy with respect to releasing documentation to the

Specifically supported Dual x86 CPU Servers

2006-06-14 Thread Tito Mari Francis Escaño
In my old company, I would have wanted to implement the web server in OpenBSD for security and performance reasons, but that ASUS AP1600 dual Xeon server just won't run even the install disk. Unfortuantely, there's no definite list of servers fitting this criteria; worse, I checked the internal

Re: Help in Setting up Open-ended VPN connections

2006-06-14 Thread Hans-Joerg Hoexer
Hi, On Tue, Jun 13, 2006 at 04:10:08PM -0700, Spruell, Darren-Perot wrote: To follow that further, is it currently possible to do this kind of road-warrior setup using ipsecctl/ipsec.conf? Doesn't it require aggressive mode do to the unknown nature of the peer IP? since c2k6 it almost is.

Re: Specifically supported Dual x86 CPU Servers

2006-06-14 Thread Jasper Valentijn
Tito Mari Francis Escaqo schreef: Unfortuantely, there's no definite list of servers fitting this criteria; There is. May I please know from those with first-hand experience what are the specific brand and models of dual x86 CPU servers that can install and run OpenBSD (whatever version,

3 jours gratuits pour trouver l'ame soeur

2006-06-14 Thread Meetic
Si le message ne s'affiche pas correctement, cliquez ici [IMAGE] [IMAGE] [IMAGE] C'est le printemps ! Trouvez l'bme soeur Durant 3 jours, fantes des rencontres en utilisant gratuitement meetic, premier site de rencontres en Europe. Tous les services meetic sont gratuits. *Offre valable

Re: CARP + OpenBGPd, fail-over

2006-06-14 Thread Stuart Henderson
On 2006/06/14 08:53, Thomas Bader wrote: In one case the fail-over does not work well: If the BGP-peering on r0a to the upstream goes down all traffic will be routed from r0a via $pfsync_if to r0b and to the upstream from there on. SSH and browsing through web pages with HTTP works that way.

Re: wikipedia article

2006-06-14 Thread Per Fogelström
On Wednesday 14 June 2006 00:50, Johnny Billquist wrote: Per Fogelstrvm wrote: On Tuesday 13 June 2006 14:23, Rick Kelly wrote: Johnny Billquist said: There's actually a cheesy way to do demand paging with microprocessors that don't support demand paging (such as the original 68000--another

pf: binat issues

2006-06-14 Thread Bolke de Bruin
Hello, I am trying to accomplish a network setup which currently looks like: * internal network * dmz * dmz2 (unused currently) * external network To allow web traffic etc I have configured aliases and binat rules on the external interface (eg. binat on $ext_if from $www_intern to any -

SOLVED - caching DNS server, pf, dhcp, and tinyproxy

2006-06-14 Thread Allen Theobald
Dear All, Everything is working now: caching DNS server, pf, dhcp, and tinyproxy. For the record, these really were my friends: 1. pfctl -g -s rules | grep '^@' 2. tinyproxy compiled with --enable-debug 3. this list (awe shucks!) Tinyproxy.conf ended up being the culprit but not without a

Re: suspended zaurus doesn't wake up (-CURRENT)

2006-06-14 Thread ddp
On 6/13/06, Matthias Kilian [EMAIL PROTECTED] wrote: Hi, when suspending the zaurus using a -CURRENT kernel or the latest snapshot (from june, 8th), it isn't possible to wake up the system. This happens both with power supply connected and with battery only, as well as with pressing the

Re: Hifn policy on documentation

2006-06-14 Thread L. V. Lammert
On Tue, 13 Jun 2006, Bryan Irvine wrote: Registration at our extranet is required along with an email address that can be confirmed. We cannot support anonymous FTP or http downloads. The reason for this is that we are required by the conditions of our US export licenses to know who and

Re: Hifn policy on documentation

2006-06-14 Thread L. V. Lammert
At 08:45 AM 6/14/2006 -0600, you wrote: L. V. Lammert wrote: BS aside, it's obvious you don't deal in US markets! While the implementation may be flawed, dealing with export regulations, silly as that may seem to non US organizations, CAN be business threatening. Not to be taken lightly.

Re: Hifn policy on documentation

2006-06-14 Thread Theo de Raadt
The fact that a company restricts documentation to US download to satisfy export concerns is quite valid. If the TERMS of the license ON the documentation are 'unrestricted use', that's where we need to direct our attention. But that is not the point of the whole problem. The issue is

Sundance Network card

2006-06-14 Thread Claudiu Pruna
Hi there, I have a question about a network card recently bought by one customer and which is shown as not configured in dmesg, and the board seems to have on the cd it came with drivers for win family, novell, linux and freebsd but not openbsd, so I am wondering if there is any

Re: Hifn policy on documentation

2006-06-14 Thread Breen Ouellette
L. V. Lammert wrote: BS aside, it's obvious you don't deal in US markets! While the implementation may be flawed, dealing with export regulations, silly as that may seem to non US organizations, CAN be business threatening. Not to be taken lightly. This issue has nothing to do with export

Re: err packets on Intel PRO/1000T

2006-06-14 Thread Matt Wilkins
hi, well it was cat 5e cable, and we just changed it to a _tested_ cat 6 cable. didn't help, damn, i was hoping that was it. i guess the next thing is to try a different nic, pity i can't do that without shutting the baby down. matt On Tue, Jun 13, 2006 at 01:06:52PM -0700, Chris Cappuccio

Re: Sundance Network card

2006-06-14 Thread Miod Vallat
I have a question about a network card recently bought by one customer and which is shown as not configured in dmesg, and the board seems to have on the cd it came with drivers for win family, novell, linux and freebsd but not openbsd, so I am wondering if there is any chance to use it

Sundance Network card

2006-06-14 Thread Alexey E. Suslikov
I have a question about a network card recently bought by one customer and which is shown as not configured in dmesg, and the board seems to have on the cd it came with drivers for win family, novell, linux and freebsd but not openbsd, so I am wondering if there is any chance to use it

Re: Hifn policy on documentation

2006-06-14 Thread Adam
On Wed, 14 Jun 2006 09:54:02 -0500 L. V. Lammert [EMAIL PROTECTED] wrote: Huh? What world are you living in? Export regulations for US companies are EXTREMELY onerous, and if a company wants to do business internationally, they have a ton of lawyers on staff playing games with things like

Re: CARP + OpenBGPd, fail-over

2006-06-14 Thread Thomas Bader
* Stuart Henderson [EMAIL PROTECTED] [060614 11:34]: On 2006/06/14 08:53, Thomas Bader wrote: As long as traffic gets routed from LAN via r0a to r0b every large download just stalls after a few kbytes. With tcpdump I found out that the first few kbytes make it through and afterwards ICMP

Re: cgi with chroot

2006-06-14 Thread John Draper
You wrote: The error message you get Premature end of script headers means that the HTTP header generated by your CGI is not correct. You need at least to tell the webserver what content type your CGI generates before sending any further data. For example in a sh script: #!/bin/sh echo

Re: Hifn policy on documentation

2006-06-14 Thread L. V. Lammert
At 12:05 PM 6/14/2006 -0400, Adam wrote: On Wed, 14 Jun 2006 09:54:02 -0500 L. V. Lammert [EMAIL PROTECTED] wrote: Huh? What world are you living in? Export regulations for US companies are EXTREMELY onerous, and if a company wants to do business internationally, they have a ton of lawyers

Re: Hifn policy on documentation

2006-06-14 Thread Adam
L. V. Lammert [EMAIL PROTECTED] wrote: Unfortunately, the 'Real World' seldom is aligned with the US Feds! Just ask anyone that deals with Exports or the IRS. Sometimes it's truly amazing that this country actually CAN get something done! In what way is any of this relevant? Nobody is

Re: CARP + OpenBGPd, fail-over

2006-06-14 Thread Henning Brauer
* Thomas Bader [EMAIL PROTECTED] [2006-06-14 09:02]: In one case the fail-over does not work well: If the BGP-peering on r0a to the upstream goes down all traffic will be routed from r0a via $pfsync_if to r0b and to the upstream from there on. SSH and browsing through web pages with HTTP

Re: Spam Trapping

2006-06-14 Thread John Draper
Mike Spenard wrote: What are some thoughts on purposely getting a spam trap email address acquired by spammers and the best way to do so. It is hard to do initially, unless you want to spend a lot of time signing up for things over the web... In my case, I have a very good spam trap. But I

kernel crash on 3.9

2006-06-14 Thread Matt Rowley
Hi, We've had one of our firewalls crash. I've included ps and trace output below, along with the dmesg. Thanks! --Matt kernel: page fault trap, code=0 Stopped at ip_output+0x7e0: testb$0x5,0x34(%eax) ddb ps PID PPIDPGRP UID S FLAGS WAITCOMMAND

Re: Hifn policy on documentation

2006-06-14 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] The fact that a company restricts documentation to US download to satisfy export concerns is quite valid. No, it is not. There are no export concerns over documentation. Huh? Better get yourself a lawyer before you land in jail! OTOH, you're not in the

Re: Sensors and bioctl

2006-06-14 Thread Jim Razmus
* Gaby vanhegan [EMAIL PROTECTED] [060614 12:52]: Just an idle thought: are there any plans to put information from bioctl into some sensors that would be accessible by sysctl -a? It's (marginally) easier to parse information from the sysctl output than from bioctl itself. Gaby --

Re: Sensors and bioctl

2006-06-14 Thread Theo de Raadt
Just an idle thought: are there any plans to put information from bioctl into some sensors that would be accessible by sysctl -a? It's (marginally) easier to parse information from the sysctl output than from bioctl itself. In -current you get this: hw.sensors.69=sd0, ami0 0, drive

FAQ - PF: Address Pools and Load Balancing

2006-06-14 Thread Cédric Brisseau
Hi, I have e few questions regarding the PF FAQ, PF: Address Pools and Load Balancing. -- In the load balance outgoing traffic example, there is: # route packets from any IPs on $ext_if1 to $ext_gw1 and the same for # $ext_if2 and $ext_gw2 pass out on $ext_if1 route-to ($ext_if2 $ext_gw2)

Re: suspended zaurus doesn't wake up (-CURRENT)

2006-06-14 Thread ddp
Just a quick update: The newest shapshot (June 13) seems to work better. zzz doesn't work properly, but using the power button to suspend has worked fine for me so far.

Re: Spam Trapping

2006-06-14 Thread tony sarendal
On 14/06/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On Wed, Jun 14, 2006 at 09:31:49AM -0700, John Draper wrote: Mike Spenard wrote: What are some thoughts on purposely getting a spam trap email address acquired by spammers and the best way to do so. It is hard to do initially,

Re: Spam Trapping

2006-06-14 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] we used to have 'spammers ? spam this [EMAIL PROTECTED]' at the bottom of each page so that crawlers would spam it. also, we had a few systems accounts, not supposed to receive mail, act as spam traps which proved to be quite efficient. So what do you guys do

recording streams with OpenBSD

2006-06-14 Thread Bryan
Does anyone have a good way of taking streams from the web (like music streams) and record them to whatever format, specifically .ogg or .mp3? I first tried to use Mplayer and dd if=/dev/sound of=/var/audio.raw like in the FAQ, but it kept saying that the audio device was busy. I then looked

Re: Hifn policy on documentation

2006-06-14 Thread Daniel Ouellet
On Tue, Jun 13, 2006 at 08:43:16AM -0600, Theo de Raadt wrote: [snip] And if you continue baiting me, I will delete the driver from our source tree. Here is my conclusion on this. OpenBSD is the MOST secure OS on the planet and no one can dispute that. PF is also the most secure firewall as

Re: recording streams with OpenBSD

2006-06-14 Thread Will Maier
On Wed, Jun 14, 2006 at 12:57:48PM -0700, Bryan wrote: Does anyone have a good way of taking streams from the web (like music streams) and record them to whatever format, specifically .ogg or .mp3? I first tried to use Mplayer and dd if=/dev/sound of=/var/audio.raw like in the FAQ, but it

Re: Spam Trapping

2006-06-14 Thread tony sarendal
On 14/06/06, Spruell, Darren-Perot [EMAIL PROTECTED] wrote: From: [EMAIL PROTECTED] we used to have 'spammers ? spam this [EMAIL PROTECTED]' at the bottom of each page so that crawlers would spam it. also, we had a few systems accounts, not supposed to receive mail, act as spam traps

Re: Hifn policy on documentation

2006-06-14 Thread Bryan Irvine
Adaptec was removed and we are better off and have more reliable solutions now. So be it with Hifn crypto accelerators until they do. Agreed, and because of the whole Adaptec debacle, more people are aware of LSI Logic. People who have started using LSI (me) who hadn't heard of them before AND

Re: Spam Trapping

2006-06-14 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] So if people route specific unused email addresses to spam traps, what do they actually do with the received emails to reduce spam to legitimate addresses ? If you're not making the connection, you don't understand how spamd(8) works. Your MX receives mail for

Re: recording streams with OpenBSD

2006-06-14 Thread Bryan
Will Maier wrote: On Wed, Jun 14, 2006 at 12:57:48PM -0700, Bryan wrote: Does anyone have a good way of taking streams from the web (like music streams) and record them to whatever format, specifically .ogg or .mp3? I first tried to use Mplayer and dd if=/dev/sound of=/var/audio.raw like in

Re: recording streams with OpenBSD

2006-06-14 Thread Bryan
Sam Chill wrote: On 6/14/06, Bryan [EMAIL PROTECTED] wrote: Does anyone have a good way of taking streams from the web (like music streams) and record them to whatever format, specifically .ogg or .mp3? Try using audio/streamripper from ports. It worked quite well for me. -Sam I would

Re: Spam Trapping

2006-06-14 Thread tony sarendal
On 14/06/06, Spruell, Darren-Perot [EMAIL PROTECTED] wrote: From: [EMAIL PROTECTED] So if people route specific unused email addresses to spam traps, what do they actually do with the received emails to reduce spam to legitimate addresses ? If you're not making the connection, you don't

Re: Kernel Crash on OpenBSD_3_9

2006-06-14 Thread Nicholas Young
On Wed, Jun 14, 2006 at 09:16:57AM +1000, Nicholas Young wrote: We have a Tyan S2882-D that has been having some problems. A previous panic seemed to be related to the Broadcom chipset. Details at http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yesnumbers=5144 Since disabling the

ftp problems with OpenBSD 3.9

2006-06-14 Thread Tim
I may be beat up for asking this question, but I'll endure it if it leads to an answer. In the past, I've setup OpenBSD 3.8 ftpd servers that my users access using Microsoft web folders. Everything works fine. A user double clicks on the web folder and the contents of the ftp folder pops up

Re: recording streams with OpenBSD

2006-06-14 Thread Paul de Weerd
On Wed, Jun 14, 2006 at 03:01:58PM -0700, Bryan wrote: | $ man mplayer | [...] | $ mplayer -dumpstream http://your.stream.com/stream.mp3 -dumpfile | stream.mp3 | | | | I did find that, but the stream is not an .mp3 file. | | here is one of links that I connect to... San Diego

Re: Kernel Crash on OpenBSD_3_9

2006-06-14 Thread Nicholas Young
On Wed, Jun 14, 2006 at 09:16:57AM +1000, Nicholas Young wrote: We have a Tyan S2882-D that has been having some problems. A previous panic seemed to be related to the Broadcom chipset. Details at http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yesnumbers=5144 On a slightly different

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Nick Guenther
On 6/14/06, Tim [EMAIL PROTECTED] wrote: I may be beat up for asking this question, but I'll endure it if it leads to an answer. In the past, I've setup OpenBSD 3.8 ftpd servers that my users access using Microsoft web folders. Everything works fine. A user double clicks on the web folder and

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Smith
Sorry, a little more detail. Pf is not running on any of these ftpd servers. My ftpd setup consist mainly of: /etc/rc.conf.local = ftpd_flags=-DllUSAn /etc/ftpusers = has the admin account in there /etc/ftpchroot = the account that will receive the scans /etc/shells = /usr/bin/false the

Re: Hifn policy on documentation

2006-06-14 Thread Rod.. Whitworth
On Wed, 14 Jun 2006 10:10:11 -0700, Spruell, Darren-Perot wrote: I have to agree here. Stop being a drone and realize that this vendor is being unreasonable. Exactly. Maybe getting to be desperate too? http://tinyurl.com/n5xdo From the land down under: Australia. Do we look umop apisdn from up

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] Sorry, a little more detail. Pf is not running on any of these ftpd servers. My ftpd setup consist mainly of: /etc/rc.conf.local = ftpd_flags=-DllUSAn /etc/ftpusers = has the admin account in there /etc/ftpchroot = the account that will receive the scans

sendmail config: non-system mail accounts?

2006-06-14 Thread Jacob Yocom-Piatt
i'm pretty comfortable using postfix as an MTA, but i have only now been fiddling with sendmail. everything has been going fine, except that i can't figure out how to add mail accounts for users without adding them as users on the mailserver itself when using sendmail. for postfix this is clearly

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Allen Theobald
I would ask: does it still work under 3.8? I'm not so sure 3.9 is the culprit. MS security updates hose this kind of stuff all the time (at least for me). Take care, Allen --- Tim [EMAIL PROTECTED] wrote: I may be beat up for asking this question, but I'll endure it if it leads to an

Re: wi: ifconfig txpower wrong for non 100mW wireless cards?

2006-06-14 Thread pedro la peu
Yes, that is what I figured too from the source. I have a 200mW card here which I'd like to limit to 100mW (european limit) by setting the appropriate txpower after accounting for antenna gain/cable loss. Use an EU card. However, I doubt that e.g. subtracting 3dBm is sufficient, dBm(r)?

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Smith
This will answer two post: It does work in 3.8 still. As a matter a fact, I have two servers on the intranet. The 3.8 works fine but not the 3.9. I tried the passive/active and still the problem persist. If I use the command line or filezilla (another windows ftp client that's open

Re: recording streams with OpenBSD

2006-06-14 Thread Chris Cappuccio
Check out http://www.nmedia.net/~chris/mp3ivo/ I did this a while ago when I got tired of missing my favorite radio shows. There's also a web front end there for easily playing stuff that you record. It's all driven by cron and very, very basic. Bryan [EMAIL PROTECTED] wrote: Does anyone

Re: Hifn policy on documentation

2006-06-14 Thread Phil Howard
On Tue, Jun 13, 2006 at 07:11:39PM -0400, Marcus Watts wrote: | usage. It's conceivable they think their competitors are actually | stupid enough that this form will stop them from learning about what | they're doing or coming up with better ways to do it. In any event, | however justifiable

Re: Hifn policy on documentation

2006-06-14 Thread Phil Howard
On Wed, Jun 14, 2006 at 11:16:54AM -0500, L. V. Lammert wrote: | Bottom line - nobody is going to change the US export regulations, we just | have to deal with them. If the license on vendor h/w s/w **IS** to our | liking, there's no reason to dis them just because some lawyers MAKE them |

Re: Hifn policy on documentation

2006-06-14 Thread L. V. Lammert
On Wed, 14 Jun 2006, Phil Howard wrote: This sillyness is like trying to prevent terrorist from having electricity by not disclosing to them what the spacing between the prongs on electric plugs is. It has absolutely nothing to do with it, and reeks of analysis by a lawyer more interested in

Re: Hifn policy on documentation

2006-06-14 Thread Darrin Chandler
On Wed, Jun 14, 2006 at 08:10:06PM -0500, Phil Howard wrote: If Mr. Cohen had come here and said Sorry, but our lawyer(s) insist that we not make our interface documents open to people that don't play their game of 50 questions then I don't think people would be blaming him for any of this.

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Tobias Ulmer
On Wed, Jun 14, 2006 at 05:38:07PM -0700, Smith wrote: This will answer two post: It does work in 3.8 still. As a matter a fact, I have two servers on the intranet. The 3.8 works fine but not the 3.9. I tried the passive/active and still the problem persist. If I use the command line

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Nick Holland
Smith wrote: This will answer two post: It does work in 3.8 still. As a matter a fact, I have two servers on the intranet. The 3.8 works fine but not the 3.9. I tried the passive/active and still the problem persist. If I use the command line or filezilla (another windows ftp client

Re: ddos mail attack thwarted by spamd greylisting!

2006-06-14 Thread riwanlky
Hi Guys, I am going to install IDS for my firewall. According to this message snort have problem, is there any alternative IDS? Is there any IPS? Thanks, Riwan At 01:07 AM 6/13/2006 -0600, Bob Beck wrote: Luckily, spamd greylisting saved the day. If it wasn't for BASE/snort reporting of

Re: wi: ifconfig txpower wrong for non 100mW wireless cards?

2006-06-14 Thread Charles Dietlein
EE/RF pedant here (there had to be one, right?). However, I doubt that e.g. subtracting 3dBm is sufficient, say Without going into detail, it needs to be said that dB is a relative measurement while dBm is absolute. Thus, one would state that 3 dB is subtracted from X dBm in order to

Re: smtp-gated alternative for OpenBSD

2006-06-14 Thread Craig Skinner
On Sun, Jun 11, 2006 at 03:43:24PM +0300, Soner Tari wrote: Hi all, I'm trying to find a fully transparent smtp proxy for outgoing mails from NATed hosts behind my firewall (smtp proxy will run on this firewall). smtp-gated of FreeBSD seems like an exact match. What is the equivalent of

Re: I can't make iwi(4) driver work in 3.9

2006-06-14 Thread djgoku
On 5/6/06, Ramiro Aceves [EMAIL PROTECTED] wrote: I have an Intel 2200 Wireless card on my laptop. It was working on OpenBSD 3.8. I have just installed a fresh OpenBSD 3.9. I also have installed the 3.0 firmware. # pkg_info iwi-firmware-3.0Firmware binary image for iwi driver (I am not

Re: Hifn policy on documentation

2006-06-14 Thread Wolfgang S. Rupprecht
So what if one of the driver writers for one of the open source operating systems were to design a set of open standards for a hardware/software interface for chipsets in this class. I guess the part I don't understand is why are open source folks so wary of running black-box *.o binaries

Re: developing a backup strategy

2006-06-14 Thread Craig Skinner
On Wed, Jun 14, 2006 at 03:27:18AM +, Travers Buda wrote: My favorite solution is rsnapshot in ports. It beats rsync and scp because not only does it allow you to specify what and when to backup, but it uses hard links. What's that got to do with anything? Well it rsyncs everything on

Re: ftp problems with OpenBSD 3.9

2006-06-14 Thread Matthias Kilian
On Wed, Jun 14, 2006 at 10:27:43PM -0400, Nick Holland wrote: IF changing the FTP source code from 3.9's to 3.8's Fixes the problem, just start putting in change after change until it breaks. :) Could it just be this one, i.e. MS software tries to login without password? | CVSROOT: