Package update candidates

2006-10-22 Thread Bruno Carnazzi
Hi misc, When upgrading some packages with 'pkg_add -u', I sometimes see : No need to update uptodate_package and Candidates for updating package - the_same_package_the_same_version What's the difference ? Please notice that in first case, the package seems ignored, and in the second case,

Re: new tool: openportd

2006-10-22 Thread Antti Harri
On Sat, 21 Oct 2006, Nick Guenther wrote: On 10/21/06, Steffen Wendzel [EMAIL PROTECTED] wrote: 40tg340503n5 pf/iptables (load some other rules or whatever) So this is like an insecure version of SSH? If you configure it to behave like that, probably. But if you configure it to open a

Re: new tool: openportd

2006-10-22 Thread Steffen Wendzel
On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : On 10/21/06, Steffen Wendzel [EMAIL PROTECTED] wrote: : hi, : : I wrote a new tool I call OpenPortd for my linux distribution : but since I my linux distribution is still under development : and I want to release the

Re: new tool: openportd

2006-10-22 Thread Kian Mohageri
On 10/22/06, Steffen Wendzel [EMAIL PROTECTED] wrote: You normaly have different open ports pf(4) makes this a minor issue. No offense, but what you have there (in the example specifically) is no better than a limited (if you consider ability to reboot or kill ssh limited) version of

Re: new tool: openportd

2006-10-22 Thread Clint M. Sand
On Sun, Oct 22, 2006 at 03:55:39AM -0700, Kian Mohageri wrote: On 10/22/06, Steffen Wendzel [EMAIL PROTECTED] wrote: You normaly have different open ports pf(4) makes this a minor issue. No offense, but what you have there (in the example specifically) is no better than a limited

Re: pf load balancing and failover

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 01:44, Kevin Reay wrote: Point of correction, slbd didn't have the ability to ping IP addresses. Good call. You might check the code in CVS, it should compile and work on 3.9. Your right, I didn't notice it was being maintained. Thanks for the pointer, and

Re: Solution to - Re: SSH upgrade to ver 4.4 on OBSD 3.9 stable broke key auth

2006-10-22 Thread Girish Venkatachalam
On Sat, Oct 21, 2006 at 10:04:19PM +0200, Per-Olov Sj??holm wrote: Here is a post with info that solves and explain the case if someone else get stuck in the problem. This problem was actually caused by an updated OpenSSL. I have had 2048 and 4096 SSH keys that have worked perfect until

Re: new tool: openportd

2006-10-22 Thread Inigo T. A.
El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : : So this is like an insecure version of SSH? it has nothing todo with SSH. And of course it isn't very secure BUT it adds security where normaly no

Re: new tool: openportd

2006-10-22 Thread Steffen Wendzel
On Sun, 22 Oct 2006 14:42:18 +0200 Inigo T. A. [EMAIL PROTECTED] wrote: : El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: : On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : : : : : So this is like an insecure version of SSH? : : it has nothing

Re: Solution to - Re: SSH upgrade to ver 4.4 on OBSD 3.9 stable broke key auth

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 15:48, Girish Venkatachalam wrote: On Sat, Oct 21, 2006 at 10:04:19PM +0200, Per-Olov Sj??holm wrote: Here is a post with info that solves and explain the case if someone else get stuck in the problem. This problem was actually caused by an updated OpenSSL. I

Re: new tool: openportd

2006-10-22 Thread Darrin Chandler
On Sun, Oct 22, 2006 at 04:41:17PM +0200, Steffen Wendzel wrote: this isn't correct. Every service had some security problems in the past. Imagin that your service X is vulnerable (only since a few h by a zero day exploit or so) and someone tries to exploit it at 2:00 in the morning. but

Re: new tool: openportd

2006-10-22 Thread Tobias Weisserth
Hi, On Oct 22, 2006, at 4:41 PM, Steffen Wendzel wrote: this isn't correct. Every service had some security problems in the past. Imagin that your service X is vulnerable (only since a few h by a zero day exploit or so) and someone tries to exploit it at 2:00 in the morning. but if you run

Re: pf load balancing and failover

2006-10-22 Thread Bill Marquette
On 10/22/06, Per-Olov Sjvholm [EMAIL PROTECTED] wrote: Hi I have followed this thread. Can anyone point out a working download link? Sourceforge does not have any working mirrors for this slbd-1.3.tar.gz file.. Probably a misconfiguration somewhere. Hmm, didn't notice that they didn't mirror

Re: new tool: openportd

2006-10-22 Thread ropers
On 22/10/06, Steffen Wendzel [EMAIL PROTECTED] wrote: On Sun, 22 Oct 2006 14:42:18 +0200 Inigo T. A. [EMAIL PROTECTED] wrote: : El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: : On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : : : : : So this is

Re: new tool: openportd

2006-10-22 Thread Nick Holland
Steffen Wendzel wrote: On Sun, 22 Oct 2006 14:42:18 +0200 Inigo T. A. [EMAIL PROTECTED] wrote: ... : If you have a security problem with a service, the only more secure : action is to fix it, don't to open it eventually. : this isn't correct. Every service had some security problems in the

Re: Package update candidates

2006-10-22 Thread Marc Espie
On Sun, Oct 22, 2006 at 02:18:09PM +0400, Bruno Carnazzi wrote: Hi misc, When upgrading some packages with 'pkg_add -u', I sometimes see : No need to update uptodate_package and Candidates for updating package - the_same_package_the_same_version What's the difference ? Please notice

Re: new tool: openportd

2006-10-22 Thread Jan Stary
It is like a port knocking service but a little bit different: Normaly a port knocking service uses TCP/UDP, but openportd uses ICMP echo response packets because they are not so easy to send like echo requests or TCP/UDP port tests (kiddies could simply use ping or nmap for this job).

Re: pf load balancing and failover

2006-10-22 Thread Kevin Reay
On 10/22/06, Per-Olov Sjvholm [EMAIL PROTECTED] wrote: Hi again I am looking at the CVS. I can't see its possible to out of the box remove addresses from a round robin scheme in PF against a faulty web server. Am I missing something? But I maybe misunderstood Kevin Reay that in this thread

Re: [OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread ropers
On 22/10/06, Matthias Kilian [EMAIL PROTECTED] wrote: I don't know the english words, so here's my impression of this situation in german (perhaps someone may translate it): Die Leute lassen sich wie die Laemmer zur Schlachtbank fuehren -- immer und immer wieder. People let

Re: pf load balancing and failover

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 17:29, Bill Marquette wrote: On 10/22/06, Per-Olov Sjvholm [EMAIL PROTECTED] wrote: Hi I have followed this thread. Can anyone point out a working download link? Sourceforge does not have any working mirrors for this slbd-1.3.tar.gz file.. Probably a

Adaptec AIC-7860/AIC-7890

2006-10-22 Thread Tom
Hi I'm trying to install a snapshot on a Dell PowerEdge 6300 using the floppyB boot disk. Unfortunately, the Adaptec AIC-7860/AIC-7890 SCSI Host adapters aren't being configured so I cannot setup the disks. According to http://openbsd.org/i386.html the AIC-7860 and AIC-7890 are supported by

[OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread Matthias Kilian
On Mon, Oct 16, 2006 at 04:13:44PM -0500, Robby Workman wrote: Linux: NVIDIA Binary Graphics Driver Exploit http://kerneltrap.org/node/7228 http://www.rapid7.com/advisories/R7-0025.jsp Yes, and really scares me are the guys that still don't get it. After some days of vacation I just checked

Re: pf load balancing and failover

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 21:13, Kevin Reay wrote: On 10/22/06, Per-Olov Sjvholm [EMAIL PROTECTED] wrote: Hi again I am looking at the CVS. I can't see its possible to out of the box remove addresses from a round robin scheme in PF against a faulty web server. Am I missing something?

Sun x2100 M2 DMESG weirdenn and remote access. OpenBSD 4.0

2006-10-22 Thread Daniel Ouellet
Hi, I loaded 4.0 into a nice new Sun x2100 M2 and looks like it's working pretty well so far anyway. But I see a few weird things in the dmesg, like the dual core cpu display one core at 1.8GHz and the other at 2.4 sometime? Some device show not configure, but looks like they work.

Re: [OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread ropers
On 22/10/06, ropers [EMAIL PROTECTED] wrote: On 22/10/06, Matthias Kilian [EMAIL PROTECTED] wrote: I don't know the english words, so here's my impression of this situation in german (perhaps someone may translate it): Die Leute lassen sich wie die Laemmer zur Schlachtbank

Re: [OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread Ingo Schwarze
Matthias Kilian wrote on Sun, Oct 22, 2006 at 09:14:01PM +0200: On Mon, Oct 16, 2006 at 04:13:44PM -0500, Robby Workman wrote: Linux: NVIDIA Binary Graphics Driver Exploit http://kerneltrap.org/node/7228 http://www.rapid7.com/advisories/R7-0025.jsp Yes, and really scares me are the guys

Re: Adaptec AIC-7860/AIC-7890

2006-10-22 Thread Martin Reindl
Tom [EMAIL PROTECTED] wrote: Hi I'm trying to install a snapshot on a Dell PowerEdge 6300 using the floppyB boot disk. it's on floppy A

Sun Niagara supported?

2006-10-22 Thread Jean-Daniel Beaubien
Hi, I'm just wondering if the Niagara chip (by Sun) is supported on OpenBSD (On-die encryption would make for very sweet vpn firewalls me thinks). I think I read somewhere something about Sun kind of open sourcing the design of the chip, did I dream this? Thanks, JD P.S. WHEN WILL THOSE

Re: new tool: openportd

2006-10-22 Thread Lars Hansson
On Sunday 22 October 2006 22:41, you wrote: this isn't correct. Every service had some security problems in the past. Imagin that your service X is vulnerable (only since a few h by a zero day exploit or so) and someone tries to exploit it at 2:00 in the morning. Good thing there cant be any

Re: Sun Niagara supported?

2006-10-22 Thread Jason George
I'm just wondering if the Niagara chip (by Sun) is supported on OpenBSD Full and proper support of the Ultrasparc III processor is pretty much an implied requirement first... and we're still working on that...

Re: Adaptec AIC-7860/AIC-7890

2006-10-22 Thread Miod Vallat
I'm trying to install a snapshot on a Dell PowerEdge 6300 using the floppyB boot disk. Unfortunately, the Adaptec AIC-7860/AIC-7890 SCSI Host adapters aren't being configured so I cannot setup the disks. According to http://openbsd.org/i386.html the AIC-7860 and AIC-7890 are supported by