Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Dries Schellekens
Bihlmaier Andreas wrote: ## openssl speed aes-128-cbc type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes aes-128 cbc 17311.15k18319.00k18569.35k18893.09k 18765.02k ## openssl speed aes-256-cbc type 16 bytes 64 bytes256 bytes

Re: pkg_add -u not working

2006-06-21 Thread atstake atstake
On 6/21/06, Benjamin Collins [EMAIL PROTECTED] wrote: What I expect the tool to do if I invoke it like $ sudo pkg_add -u is to do this (from pkg_add(1)): If no pkgname is given, pkg_add will update all installed packages. What actually happens after the above invocation is what Sebastian

CVE-1999-0166 bug in NFS

2006-06-21 Thread Martin Marusak
I have installes OpenBSD 3.8. I exported a directory with /mnt/gamma -maproot=root 192.168.1.14 line in /etc/exports Next I tested the server with Nessus vulnerability scaner and it found a hole in NFS: --- The remote NFS server allows users to use a 'cd ..' command to access other directories

Re: CVE-1999-0166 bug in NFS

2006-06-21 Thread Otto Moerbeek
On Wed, 21 Jun 2006, Martin Marusak wrote: I have installes OpenBSD 3.8. I exported a directory with /mnt/gamma -maproot=root 192.168.1.14 line in /etc/exports Next I tested the server with Nessus vulnerability scaner and it found a hole in NFS: --- The remote NFS server allows users

Re: Clock Drift - VMWare

2006-06-21 Thread Guido Tschakert
Adrian Close schrieb: On Tue, 20 Jun 2006, Justin Blackmore wrote: Im running several OpenBSD 3.9 VM's on a GSX server and the clocks on the OBSD vm's drift pretty bad, the real time host hardware clock is How much drift? The guest hardware clock generally won't be stable enough for NTP

Re: independence from dependencies

2006-06-21 Thread Joachim Schipper
On Tue, Jun 20, 2006 at 05:26:51PM -0700, prad wrote: i'm running koffice which wants postgre8.1.3 but i want to use postgre8.1.4 (not sure why other than because the postgre site told me to) however, when i pkg_add we get a conflict with the postgresql-client-8.1.3 which has already

Re: CVE-1999-0166 bug in NFS

2006-06-21 Thread Miod Vallat
I have installes OpenBSD 3.8. I exported a directory with /mnt/gamma -maproot=root 192.168.1.14 line in /etc/exports Next I tested the server with Nessus vulnerability scaner and it found a hole in NFS: [...] This seems like an old (1999) hole. Is there any patch for it or did I do anything

vpn gateway question

2006-06-21 Thread Frans Haarman
I have a quick question. I want to try to setup a vpn gateway. It would need vpn connections with several clients (using the same subnets!!). I want to somehow map each vpn connection to another IP range, so we can contact all networks at the same time. I think I can accomplish this using NAT or

Re: Clock Drift - VMWare

2006-06-21 Thread Christopher Vance
On Wed, Jun 21, 2006 at 02:45:01PM +1000, Adrian Close wrote: On Tue, 20 Jun 2006, Justin Blackmore wrote: Im running several OpenBSD 3.9 VM's on a GSX server and the clocks on the OBSD vm's drift pretty bad, the real time host hardware clock is How much drift? The guest hardware clock

Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Bihlmaier Andreas
On Wed, Jun 21, 2006 at 09:18:14AM +0200, Dries Schellekens wrote: Bihlmaier Andreas wrote: ## openssl speed aes-128-cbc type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes aes-128 cbc 17311.15k18319.00k18569.35k18893.09k 18765.02k ## openssl

Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Dries Schellekens
Bihlmaier Andreas wrote: I dont mean to offend you, but ... Doh, I know that and these are VERY nice figures, BUT my problem is that I have to slow (== no acceleration) speed in IPSEC. I thought that OPenBSD would just make use of it (again in IPSEC) if it detects it. IPSEC always uses the

Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Massimo Lusetti
On Wed, 2006-06-21 at 13:48 +0200, Bihlmaier Andreas wrote: I dont mean to offend you, but ... Doh, I know that and these are VERY nice figures, BUT my problem is that I have to slow (== no acceleration) speed in IPSEC. I thought that OPenBSD would just make use of it (again in IPSEC) if it

Re: release email in amavis temp

2006-06-21 Thread sonjaya
some email detect spam also most importan email ,so how to restore email in /var/virusmail/xxx because taht email is important. also any body have some tip to make amavisd-new in openbsd 3.9 most faster working because they a lot delay when send and receive with attachment. my regard You can,

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

2006-06-21 Thread Frank Bax
At 04:54 PM 6/20/06, Daniel Ouellet wrote: Bryan Irvine wrote: Works ok for me. Hasn't crashed or anything like that. I use mysql 5 on OpenBSD that some web apps talk too. I just did an import of a previous dump, and it took somewhere in the neighboorhood of 7 hours give or take. (for a few

Re: release email in amavis temp

2006-06-21 Thread Guido Tschakert
sonjaya schrieb: some email detect spam also most importan email ,so how to restore email in /var/virusmail/xxx because taht email is important. also any body have some tip to make amavisd-new in openbsd 3.9 most faster working because they a lot delay when send and receive with attachment.

Re: 256 color support for terminals under X

2006-06-21 Thread Bihlmaier Andreas
On Tue, Jun 20, 2006 at 09:29:24PM +, Christian Weisgerber wrote: Bihlmaier Andreas [EMAIL PROTECTED] wrote: I stumbled across a problem with all X terminal emulators in OpenBSD (that is xterm and aterm, eterm and rxvt from ports). None of the above seems to support 256 colors. I

Re: vpn gateway question

2006-06-21 Thread Dag Richards
Frans Haarman wrote: I have a quick question. I want to try to setup a vpn gateway. It would need vpn connections with several clients (using the same subnets!!). I want to somehow map each vpn connection to another IP range, so we can contact all networks at the same time. I think I can

Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Bihlmaier Andreas
On Wed, Jun 21, 2006 at 02:24:18PM +0200, Massimo Lusetti wrote: On Wed, 2006-06-21 at 13:48 +0200, Bihlmaier Andreas wrote: I dont mean to offend you, but ... Doh, I know that and these are VERY nice figures, BUT my problem is that I have to slow (== no acceleration) speed in IPSEC. I

Re: release email in amavis temp

2006-06-21 Thread Joachim Schipper
On Wed, Jun 21, 2006 at 04:30:20PM +0200, Guido Tschakert wrote: sonjaya schrieb: some email detect spam also most importan email ,so how to restore email in /var/virusmail/xxx because taht email is important. also any body have some tip to make amavisd-new in openbsd 3.9 most faster

Re: release email in amavis temp

2006-06-21 Thread Joachim Schipper
On Wed, Jun 21, 2006 at 08:23:11PM +0700, sonjaya wrote: You can, however, configure amavisd to save pretty much exactly what you want to a temporary directory. As to the tmp directory and the directory amavisd saves to, set up a cron job to clean it out unless you want to do so manually (I

FYI SK(4) D-Link DGE-530T Rev B1 does not appear in dmesg.

2006-06-21 Thread shanejp
Hello list, Just an FYI on the B1 revision of the D-Link DGE-530T. I recently purchased another D-Link DGE-530T and noticed when I got it home that it is a Rev B1 card, unlike all my others which are Rev A1. The Rev B1 card is not shown in the dmesg and thus does not yet work. The chips on the

Crashes and HDD params

2006-06-21 Thread Przemysław Pawełczyk
Hi, How to change HDD parameters like this: wd1 at pciide0 channel 1 drive 0: FUJITSU MPD3084AT wd1: 16-sector PIO, LBA, 8063MB, 16514064 sectors wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 to get rid off the crashes I register several times a day? With very bad results on my files.

Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Dries Schellekens
Bihlmaier Andreas wrote: I use iperf -w 256k for testing purposes. The speed between hosts/router using their real IPs (-B 10.0.0.*) is about 70-80 Mb/s. ~22 Mb/s between host1 and host2 using their VPN IPs. Hope this made some stuff more clear. Thanks everyone for helping, I hope this can

Doubts about OpenBSD security.

2006-06-21 Thread João Salvatti
My doubts may seem fool, so thanks in advance for those who will read this e-mail and may help me with my doubts. 1. Why doesn't passwd ask superuser's current password when it's run by the superuser to change its own password? May not it be considered a serious security flaw? 2. Why doesn't

FW: technical help

2006-06-21 Thread Leung, Tony
Hello, I have a question about firewall rules on openbsd. Should I ask here for help? Tony

sendmail question

2006-06-21 Thread Peter Philipp
Hi, I'm trying to modify my outgoing Message-Id, with my mailer MUA (mutt) I can configure this. However when I try to use mail(1) it does not update the Message-Id, I read a bit in the source and it doesn't seem to be set in mail(1), and a ktrace shows that it pipes everything to sendmail

Re: Doubts about OpenBSD security.

2006-06-21 Thread Theo de Raadt
My doubts may seem fool, so thanks in advance for those who will read this e-mail and may help me with my doubts. 1. Why doesn't passwd ask superuser's current password when it's run by the superuser to change its own password? May not it be considered a serious security flaw? Oh come on.

Re: FW: technical help

2006-06-21 Thread Darrin Chandler
On Wed, Jun 21, 2006 at 10:12:53AM -0600, Leung, Tony wrote: I have a question about firewall rules on openbsd. Should I ask here for help? Here is a good place, and there's also a pf mailing list as well (pf@benzedrine.cx). You may want to see if your questions have already been answered by

Configuring pppoe during installation?

2006-06-21 Thread sebastian . rother
Would it be possible that the installer asks if you may wanna use the NIC for pppoe-Connections and then maybe also asks for User/PW for the connection-settings? :) In my oppinion this little change may would maybe bring more usebillity (or how that`s written...) and it would save some time wich

Re: Doubts about OpenBSD security.

2006-06-21 Thread Adam
Joco Salvatti [EMAIL PROTECTED] wrote: 1. Why doesn't passwd ask superuser's current password when it's run by the superuser to change its own password? May not it be considered a serious security flaw? No, it may not. Why would that matter at all? 2. Why doesn't the system ask the

Re: Doubts about OpenBSD security.

2006-06-21 Thread Dries Schellekens
Joco Salvatti wrote: Let's suppose an attacker entered the room where an OpenBSD server is located in, and by mistake the system administrator has forgotten to logout the root login session. So the attacker could enter in single user mode, without the need for the root password, and load a

Re: Doubts about OpenBSD security.

2006-06-21 Thread Ted Unangst
On 6/21/06, Joco Salvatti [EMAIL PROTECTED] wrote: Let's suppose an attacker entered the room where an OpenBSD server is why didn't you lock the door? located in, and by mistake the system administrator has forgotten to logout the root login session. So the attacker could enter in single

Re: Doubts about OpenBSD security.

2006-06-21 Thread Darrin Chandler
On Wed, Jun 21, 2006 at 02:23:20PM -0300, Joco Salvatti wrote: My doubts may seem fool, so thanks in advance for those who will read this e-mail and may help me with my doubts. 1. Why doesn't passwd ask superuser's current password when it's run by the superuser to change its own password?

Re: Doubts about OpenBSD security.

2006-06-21 Thread João Salvatti
Thanks for all. On 6/21/06, Peter Landry [EMAIL PROTECTED] wrote: I think that when you've given an attacker physical access to a machine with a root session open, there's not a whole lot OpenBSD (or any OS) can do... The attacker could also, with physical, attach a keystroke logger, unplug

Re: Doubts about OpenBSD security.

2006-06-21 Thread Bob Beck
* Joco Salvatti [EMAIL PROTECTED] [2006-06-21 11:38]: My doubts may seem fool, so thanks in advance for those who will read this e-mail and may help me with my doubts. 1. Why doesn't passwd ask superuser's current password when it's run by the superuser to change its own password? May not it

Re: FW: technical help

2006-06-21 Thread Terry
On Wed, Jun 21, 2006 at 10:12:53AM -0600, Leung, Tony wrote: Hello, I have a question about firewall rules on openbsd. Should I ask here for help? You can ask here or you can ask on pf@benzedrine.cx just make sure you do your research first. -- Terry http://tyson.homeunix.org

Re: Configuring pppoe during installation?

2006-06-21 Thread Marco Peereboom
I don't like this idea. I think it is the wrong assumption that most machines run PPPoE. The folks that use this can easily update the appropriate files after the initial install is complete. On Wed, Jun 21, 2006 at 07:45:45PM +0200, [EMAIL PROTECTED] wrote: Would it be possible that the

Re: Doubts about OpenBSD security.

2006-06-21 Thread Jared Solomon
That's why I always hardware hack my servers with a fragmentation grenade. And, for good measure, anti-personnel mines underneath the raised flooring. On 6/21/06, Dries Schellekens [EMAIL PROTECTED] wrote: Nonce someone has physical access, all is lost with current hardware. -- Try to do

Re: ifconfig -l feature

2006-06-21 Thread Douglas Santos
Em Qua, 2006-06-21 as 10:15 -0300, Pedro Martelletto escreveu: please add a -p too, that would make the output be in pink and a -b to blink while at it you know, it's hard to script that You are a joke Pedro Martelletto. I remember you, other day, asking for a stupid howto for squid, and

Re: Doubts about OpenBSD security.

2006-06-21 Thread Matthew Jenove
Joco Salvatti [EMAIL PROTECTED] wrote: Let's suppose an attacker entered the room where an OpenBSD server is located in, Most would argue that at this point you've already lost the security game. So the attacker could enter in single user mode, without the need for the root password, He

Re: Doubts about OpenBSD security.

2006-06-21 Thread Gabriel Puliatti
On 6/21/06, Gabriel Puliatti [EMAIL PROTECTED] wrote: On 6/21/06, Theo de Raadt [EMAIL PROTECTED] wrote: My doubts may seem fool, so thanks in advance for those who will read this e-mail and may help me with my doubts. 1. Why doesn't passwd ask superuser's current password when it's run

Re: Doubts about OpenBSD security.

2006-06-21 Thread John R. Shannon
Joco Salvatti wrote: My doubts may seem fool, so thanks in advance for those who will read this e-mail and may help me with my doubts. 1. Why doesn't passwd ask superuser's current password when it's run by the superuser to change its own password? May not it be considered a serious security

Re: ifconfig -l feature

2006-06-21 Thread Theo de Raadt
You are a joke No, the only people who are jokes around here are those who don't help improve things. Some think they can go futher, and are complete assholes. Can we please focus on technology improvements?

Re: Doubts about OpenBSD security.

2006-06-21 Thread Peter Landry
I think that when you've given an attacker physical access to a machine with a root session open, there's not a whole lot OpenBSD (or any OS) can do... The attacker could also, with physical, attach a keystroke logger, unplug your machine, or any number of other bad/humorous things I'm not

Re: ifconfig -l feature

2006-06-21 Thread Douglas Santos
Em Qua, 2006-06-21 as 15:12 -0300, Douglas Santos escreveu: Em Qua, 2006-06-21 as 10:15 -0300, Pedro Martelletto escreveu: please add a -p too, that would make the output be in pink and a -b to blink while at it you know, it's hard to script that You are a joke Pedro Martelletto.

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

2006-06-21 Thread Daniel Ouellet
Frank Bax wrote: Actually, the option is really --disable-keys. The --opt option is just a shorthand for several options (including --disable-keys). There is more as well and refer to the man page for all the details: http://dev.mysql.com/doc/refman/5.0/en/mysqldump.html The --opt Doesn't

Re: Doubts about OpenBSD security.

2006-06-21 Thread Don Boling
Wouldn't this be the main reason to use sudo? On 6/21/06, Joco Salvatti [EMAIL PROTECTED] wrote: Thanks for all. On 6/21/06, Peter Landry [EMAIL PROTECTED] wrote: I think that when you've given an attacker physical access to a machine with a root session open, there's not a whole lot

Netgear FA311v1: sis0: watchdog timeout with 3.9

2006-06-21 Thread Martin Schröder
Hi, since upgrading from 3.8 to 3.9, my firewall (which has one Netgear FA311v1) from time to time spews this: May 31 13:46:33 gryphon /bsd: sis0: watchdog timeout Jun 2 20:31:11 gryphon /bsd: sis0: watchdog timeout Jun 2 22:25:12 gryphon /bsd: sis0: watchdog timeout Jun 3 15:40:17 gryphon

Re: ifconfig -l feature

2006-06-21 Thread Dries Schellekens
Douglas Santos wrote: You are a joke Pedro Martelletto. You are the person adding a stupid extra flag to ifconfig, while Pedro is working on very useful stuff like VFS and file system support. Cheers, Dries

OT: Notebook explosion (DELL)

2006-06-21 Thread sebastian . rother
Because I know some peoples here own DELL Notebooks: It happened that such a notebook explode. The little storry is avaiable at The Inquirer http://www.theinquirer.net/?article=32550 Would be very bad if such stuff would happen if you4ve ya Notebook on ya knees or so... Kind regards, Sebastian

/etc/resolv.conf.tail

2006-06-21 Thread Peter Philipp
Hi, This is not really worth the bug report; I'm thinking a template file of /etc/resolv.conf.tail in the default system would be a great thing. This file is used by the dhclient script, here is a sample: # /etc/resolv.conf.tail is appended to /etc/resolv.conf by dhclient script. # A sample

Re: Configuring pppoe during installation?

2006-06-21 Thread sebastian . rother
I don't like this idea. I think it is the wrong assumption that most machines run PPPoE. The folks that use this can easily update the appropriate files after the initial install is complete. It`s the same assumption like asking the guy who installs OpenBSd if he wanna use dhcp. :-) I wont

Re: Doubts about OpenBSD security.

2006-06-21 Thread shanejp
Quoting Jared Solomon [EMAIL PROTECTED]: That's why I always hardware hack my servers with a fragmentation grenade. And, for good measure, anti-personnel mines underneath the raised flooring. I prefer to have the doors automatically locked and then have the halon deployed. Much cleaner. ;

Re: OT: Notebook explosion (DELL)

2006-06-21 Thread Timo Schoeler
thus [EMAIL PROTECTED] spake: Because I know some peoples here own DELL Notebooks: It happened that such a notebook explode. The little storry is avaiable at The Inquirer http://www.theinquirer.net/?article=32550 Would be very bad if such stuff would happen if you4ve ya Notebook on ya knees

Re: Configuring pppoe during installation?

2006-06-21 Thread Marco Peereboom
On Wed, Jun 21, 2006 at 09:03:43PM +0200, [EMAIL PROTECTED] wrote: I don't like this idea. I think it is the wrong assumption that most machines run PPPoE. The folks that use this can easily update the appropriate files after the initial install is complete. It`s the same assumption

XF4 Patches (Again) :(

2006-06-21 Thread Jack J. Woehr
Okay, I read the threads on misc@ and I'm still confused. The XF4 patch (3_9.002) says: Apply by doing: cd /usr/src/XF4 patch -p0 002_xorg.patch The website (http://openbsd.org/anoncvs.html) says: # cd /usr # tar xzf XF4.tar.gz which puts XF4 in /usr/XF4 Should I

How to pass mount protocol traffic (mountd/NFS) using pf?

2006-06-21 Thread Clint Pachl
Because portmap(8) dynamically assigns the mountd(8) port, how would one write a pass rule in pf for mountd(8) traffic? My problem is that every time mountd(8) is re/started, it operates on a different port and my fixed pf rules block the mount protocol and, consequently, my clients cannot mount

Re: Curious on NAT traversal possibility on PF

2006-06-21 Thread Daniel Ouellet
Nick Guenther wrote: On 6/13/06, Stuart Henderson [EMAIL PROTECTED] wrote: On 2006/06/13 22:07, Nick Guenther wrote: What is the prefered method for NAT-traversal these days? The options I know are: UPnP I suppose this one doesn't work unless the protocol bends well to it, and both ends

Re: Netgear FA311v1: sis0: watchdog timeout with 3.9

2006-06-21 Thread Maxim Bourmistrov
You are not alone with watchdog timeouts on sis(sis0 at pci0 dev 4 function 0 SiS 900 10/100BaseTX rev 0x91). For now I switched to fxp. On Wednesday 21 June 2006 20:49, Martin Schrvder wrote: Hi, since upgrading from 3.8 to 3.9, my firewall (which has one Netgear FA311v1) from time to time

Re: Doubts about OpenBSD security.

2006-06-21 Thread Craig Skinner
On Wed, Jun 21, 2006 at 11:54:37AM -0600, Bob Beck wrote: IMNSHO, a root password for single user makes the system *LESS* secure, and I'm dead serious. I would object to any attempt to commit changes to OpenBSD to have one by default. Why? Real simple: *because you asked this

Re: Trouble with Cisco Aironet 350 (PCM352)

2006-06-21 Thread Laurens Vets
Matt Van Mater wrote: I ran into a very similar (maybe same) problem here: http://marc.theaimsgroup.com/?l=openbsd-miscm=113236417207016w=2 I have not found a solution to my problem yet unfortunately. One thing I noticed is that my an0 card worked just find in 3.7 and 3.8 broke it, you might

Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Bihlmaier Andreas
On Wed, Jun 21, 2006 at 06:49:09PM +0200, Dries Schellekens wrote: Bihlmaier Andreas wrote: I use iperf -w 256k for testing purposes. The speed between hosts/router using their real IPs (-B 10.0.0.*) is about 70-80 Mb/s. ~22 Mb/s between host1 and host2 using their VPN IPs. Hope this

Re: XF4 Patches (Again) :(

2006-06-21 Thread Ted Unangst
it doesn't matter. you can drop XF4 anywhere that's convenient. just follow simple instructions in release(8) and it works. On 6/21/06, Jack J. Woehr [EMAIL PROTECTED] wrote: Okay, I read the threads on misc@ and I'm still confused. The XF4 patch (3_9.002) says: Apply by doing: cd

Re: XF4 Patches (Again) :(

2006-06-21 Thread Tobias Weisserth
Hi, I asked exactly the same question a couple of weeks ago, by the time the patch was released. You should be able to find the answers to your question in the archives ;-) kind regards, Tobias W. On Jun 21, 2006, at 10:56 PM, Jack J. Woehr wrote: Okay, I read the threads on misc@ and

Re: XF4 Patches (Again) :(

2006-06-21 Thread Jack J. Woehr
On Jun 21, 2006, at 3:44 PM, Ted Unangst wrote: it doesn't matter. you can drop XF4 anywhere that's convenient. just follow simple instructions in release(8) and it works. Thanks, Ted. From release(8): $ cd XF4SRC cvs up -r TAG -Pd Is the revision tag for XF4 the same as the

Re: Configuring pppoe during installation?

2006-06-21 Thread Chris Zakelj
[EMAIL PROTECTED] wrote: Would it be possible that the installer asks if you may wanna use the NIC for pppoe-Connections and then maybe also asks for User/PW for the connection-settings? :) In my oppinion this little change may would maybe bring more usebillity (or how that`s written...) and

Re: VIA C7 hardware AES support in IPSEC(ctl)

2006-06-21 Thread Bihlmaier Andreas
On Wed, Jun 21, 2006 at 06:49:09PM +0200, Dries Schellekens wrote: Bihlmaier Andreas wrote: I use iperf -w 256k for testing purposes. The speed between hosts/router using their real IPs (-B 10.0.0.*) is about 70-80 Mb/s. ~22 Mb/s between host1 and host2 using their VPN IPs. Hope this

Re: XF4 Patches (Again) :(

2006-06-21 Thread Ted Unangst
On 6/21/06, Jack J. Woehr [EMAIL PROTECTED] wrote: $ cd XF4SRC cvs up -r TAG -Pd Is the revision tag for XF4 the same as the corresponding OpenBSD release (in this case OPENBSD_3_9)? yes, all tags are matched.

Re: How to pass mount protocol traffic (mountd/NFS) using pf?

2006-06-21 Thread Theo de Raadt
Because portmap(8) dynamically assigns the mountd(8) port, how would one write a pass rule in pf for mountd(8) traffic? My problem is that every time mountd(8) is re/started, it operates on a different port and my fixed pf rules block the mount protocol and, consequently, my clients cannot

Re: Chrooted sftp-server and /dev/null

2006-06-21 Thread Joshua Sandbrook
Can anyone help here? Ive played wih fcntl's FD_CLOEXEC and what not.. it was set to 0, and yeah... If someone can help solve this mystery then there is one less file required in the chroot environment. A cleaner scponly shell :) On Wednesday 21 June 2006 09:41, Joshua Sandbrook wrote: Gidday

Re: sendmail question

2006-06-21 Thread Hugo Villeneuve
On Wed, Jun 21, 2006 at 07:22:28PM +0200, Peter Philipp wrote: Hi, I'm trying to modify my outgoing Message-Id, with my mailer MUA (mutt) I can configure this. However when I try to use mail(1) it does not update the Message-Id, I read a bit in the source and it doesn't seem to be set in

Re: Configuring pppoe during installation?

2006-06-21 Thread sebastian . rother
[EMAIL PROTECTED] wrote: Would it be possible that the installer asks if you may wanna use the NIC for pppoe-Connections and then maybe also asks for User/PW for the connection-settings? :) In my oppinion this little change may would maybe bring more usebillity (or how that`s written...)

Re: Configuring pppoe during installation?

2006-06-21 Thread sebastian . rother
On Wed, Jun 21, 2006 at 09:03:43PM +0200, [EMAIL PROTECTED] wrote: I don't like this idea. I think it is the wrong assumption that most machines run PPPoE. The folks that use this can easily update the appropriate files after the initial install is complete. It`s the same assumption

Scott Meenen Autoresponder

2006-06-21 Thread Scott Meenen N3SJH Autorespond
!---Begin [EMAIL PROTECTED] autoresponder-- Do you want it done right, fast or cheap? Pick two... If you have been trying to use my services and I have been un responsive, I have been helping a friend try to save his farm. Please click here to learn more.

Re: Configuring pppoe during installation?

2006-06-21 Thread Ted Unangst
On 6/21/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Like: Wich device should be used for pppoe? [fxp0] : pppoe protocol? [bla]: User ID for pppoe: foo Password for pppoe: bar PPPOE-Successfully configured and useable after reboot Just like: Start sshd? [Yes]: how many people run sshd?

Re: CVE-1999-0166 bug in NFS

2006-06-21 Thread Nick Guenther
On 6/21/06, Miod Vallat [EMAIL PROTECTED] wrote: I have installes OpenBSD 3.8. I exported a directory with /mnt/gamma -maproot=root 192.168.1.14 line in /etc/exports Next I tested the server with Nessus vulnerability scaner and it found a hole in NFS: [...] This seems like an old (1999)

Re: Configuring pppoe during installation?

2006-06-21 Thread Paul de Weerd
On Thu, Jun 22, 2006 at 01:03:33AM +0200, [EMAIL PROTECTED] wrote: | I did nto asked to add the pppoe-Code but to add a little mask into the | installer to create the hostname.pppoe. | | Like: | | Wich device should be used for pppoe? [fxp0] : | pppoe protocol? [bla]: | User ID for pppoe: foo |

Blade 1000/2000 still wanted for .nl

2006-06-21 Thread Theo de Raadt
We have found a blade 1000 for Jason in Washington DC (thanks) but are still trying to find one for Mark Kettenis in the Netherlands. If someone can help, please mail [EMAIL PROTECTED] and [EMAIL PROTECTED] thanks.

Re: CVE-1999-0166 bug in NFS

2006-06-21 Thread Ted Unangst
On 6/21/06, Nick Guenther [EMAIL PROTECTED] wrote: Why is it like this though? Seems like if you tell it to export /mnt/gamma you want it to export /mnt/gamma, not /mnt. because the only thing that identifies a file is a number. every file has a number. guess the number, and now you can open

Re: Configuring pppoe during installation?

2006-06-21 Thread Theo de Raadt
| Wich device should be used for pppoe? [fxp0] : | pppoe protocol? [bla]: I can add ppooe to the floppy, but to make it fit I am going to have to remove the fxp driver. OK?

Re: FW: technical help

2006-06-21 Thread Allen Theobald
--- Darrin Chandler [EMAIL PROTECTED] wrote: ... Here is a good place, and there's also a pf mailing list as well (pf@benzedrine.cx). ... Is this mailing list still active? I subscribed about a month ago and have yet to receive a single e-mail. The archives show no messages after Nov '05.

T1 and DSL failover? redundancy?

2006-06-21 Thread John Brahy
I was hoping to get some suggestions on the best way to handle this. We just put a DSL line for inet backup and I'd like to have it automagically failover. We are running OpenBSD 3.9 -stable on a box with four interfaces. Currently we have one interface connected to our private network and one

Re: FW: technical help

2006-06-21 Thread Darrin Chandler
On Wed, Jun 21, 2006 at 05:41:27PM -0700, Allen Theobald wrote: --- Darrin Chandler [EMAIL PROTECTED] wrote: ... Here is a good place, and there's also a pf mailing list as well (pf@benzedrine.cx). ... Is this mailing list still active? I subscribed about a month ago and have yet

Re: FYI SK(4) D-Link DGE-530T Rev B1 does not appear in dmesg.

2006-06-21 Thread Nick Holland
[EMAIL PROTECTED] wrote: ... The dmesg with the B1 card only lacks the three appropriate lines which appear for the Rev A1 card when it is inserted in the same PCI slot: IF that is true, your card wasn't inserted properly. PCI cards show up. SOMETHING will show up...even if it isn't

Re: T1 and DSL failover? redundancy?

2006-06-21 Thread NetNeanderthal
On 6/21/06, John Brahy [EMAIL PROTECTED] wrote: What are my other options? I'd like to have it automatically fail over but I'm not sure what is required to do that. Have you considered using a WAN card for your T1 natively on OpenBSD? As well, you might have a look at ifstated(8) if that's the

Re: Doubts about OpenBSD security.

2006-06-21 Thread Nick Holland
Bob Beck wrote: ... IMNSHO, a root password for single user makes the system *LESS* secure, and I'm dead serious. I would object to any attempt to commit changes to OpenBSD to have one by default. Why? Real simple: *because you asked this question*. - Now I'm not just crapping on you,

Re: Doubts about OpenBSD security.

2006-06-21 Thread Tony Abernethy
Nick Holland wrote: Bob Beck wrote: ... IMNSHO, a root password for single user makes the system *LESS* secure, and I'm dead serious. I would object to any attempt to commit changes to OpenBSD to have one by default. Why? Real simple: *because you asked this question*. - Now I'm

Re: Crashes and HDD params

2006-06-21 Thread Nick Holland
Przemys3aw Pawe3czyk wrote: Hi, How to change HDD parameters like this: wd1 at pciide0 channel 1 drive 0: FUJITSU MPD3084AT wd1: 16-sector PIO, LBA, 8063MB, 16514064 sectors wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 to get rid off the crashes I register several times a day? With

Re: FYI SK(4) D-Link DGE-530T Rev B1 does not appear in dmesg.

2006-06-21 Thread shanejp
Hello Nick, Quoting Nick Holland [EMAIL PROTECTED]: [EMAIL PROTECTED] wrote: ... The dmesg with the B1 card only lacks the three appropriate lines which appear for the Rev A1 card when it is inserted in the same PCI slot: IF that is true, your card wasn't inserted properly. I saved

Re: CVE-1999-0166 bug in NFS

2006-06-21 Thread Nick Guenther
On 6/21/06, Ted Unangst [EMAIL PROTECTED] wrote: On 6/21/06, Nick Guenther [EMAIL PROTECTED] wrote: Why is it like this though? Seems like if you tell it to export /mnt/gamma you want it to export /mnt/gamma, not /mnt. because the only thing that identifies a file is a number. every file has

Re: FYI SK(4) D-Link DGE-530T Rev B1 does not appear in dmesg. (SOLVED)

2006-06-21 Thread shanejp
Quoting [EMAIL PROTECTED]: Quoting Nick Holland [EMAIL PROTECTED]: [EMAIL PROTECTED] wrote: ... The dmesg with the B1 card only lacks the three appropriate lines which appear for the Rev A1 card when it is inserted in the same PCI slot: IF that is true, your card wasn't inserted

kein Betreff

2006-06-21 Thread Sebastian Reitenbach
__ Verschicken Sie romantische, coole und witzige Bilder per SMS! Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193

re0: eeprom autoload timeout

2006-06-21 Thread Sebastian Reitenbach
Hi, I have a problem with re0 Realtek 8169 Network card and OpenBSD 3.9. When OpenBSD starts up, it recognizes the card, I can configure IP address... But ifconfig -m re0 shows: none as the only available media option. the part of dmesg where the re0 is initialized: re0 at pci0 dev 13 function

Re: Packet overload?

2006-06-21 Thread Peter Bako
Well it is a simple ruleset (see below). As for the ISP blocking stuff - not likely, since the email server is run by me at another location. Since I have more users connecting to this server from other locations I've ruled the problem out from that end. It is only from this one location that