Re: hoststated and UDP

2007-06-28 Thread Pierre-Yves Ritschard
On Thu, 28 Jun 2007 00:19:56 +0200 Luca Corti [EMAIL PROTECTED] wrote: Hello, I've setup hoststated for load balancing of some services, and it works well. If I'm not missing something hoststated actually works just for TCP. Is there any plan to implement UDP support? Yes there is, I will

Re: Intel Core 2

2007-06-28 Thread Siegbert Marschall
Hi, On 6/27/07, Theo de Raadt [EMAIL PROTECTED] wrote: Various developers are busy implimenting workarounds for serious bugs in Intel's Core 2 cpu. These processors are buggy as hell, and some of these bugs don't just cause development/debugging problems, but will *ASSUREDLY* be

Re: nfe0 problem (obsd 4.1)

2007-06-28 Thread Markus Ritzer
Hi! I've noticed that once in a while the nfe0 interface will stop sending and receiving data. At this point I can not make it work again. The only solution I have is to reboot the box. I have installed a dc0 card in the box since. The problem seemed intermittent and not reliably

'netstat: invalid address (30000) ??? on 4.1-current i386 binary snapshot

2007-06-28 Thread Adriaan
On a freshly installed binary snapshot netstat -an -f inet6 shows netstat: invalid address (3) ??? - # netstat -an -f inet6 Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address(state) tcp6 0

Re: Intel Core 2

2007-06-28 Thread RedShift
Constantine A. Murenin wrote: On 27/06/07, Jacob Yocom-Piatt [EMAIL PROTECTED] wrote: you make more money if your widgets break because your new widget is vastly improved. new packaging, same great defects! The best thing about computer parts randomly failing will hit us in a few years, due

Re: Intel Core 2

2007-06-28 Thread Johan P. Lindström
rough translation from swedish to english of: http://strombergson.com/kryptoblog/?p=311 begin Intel Advannced Management Technology - Rootkit's for everyone intel just released a new x86 cpu, one new addition avaiding the news is the AMT (Active Management Technology) AMT is a technology

Re: Rename multiple files at once

2007-06-28 Thread T. Ribbrock
On Wed, Jun 27, 2007 at 09:52:29AM -0700, Marco S Hyman wrote: for FILE in *jpg; do NEW=$(echo $FILE | sed -e 's/\.jpg$/_thumb.jpg/') mv ${FILE} ${NEW} done There is no need for echo and sed. OpenBSD sh and ksh support ${var%suffix} which evaluates to the

Re: looking for a good guide on driver writing

2007-06-28 Thread Henning Brauer
* Gregory Edigarov [EMAIL PROTECTED] [2007-06-27 11:31]: I am looking for a guide about driver writing for OpenBSD. here it is: look for a similiar driver, read understand it, start from there. -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de

Re: Are Intel PWLA8391GT PRO/1000 GT desktop NICs supported on i386?

2007-06-28 Thread Henning Brauer
* Lloyd Martin [EMAIL PROTECTED] [2007-06-27 19:57]: Does anyone know if Intel PWLA8391GT PRO/1000 GT desktop NICs are supported on the i386 platform? without knowing about that one explicitely, in all the intel PRO/1000 should work. -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS

Re: 'netstat: invalid address (30000) ??? on 4.1-current i386 binary snapshot

2007-06-28 Thread Otto Moerbeek
On Thu, 28 Jun 2007, Adriaan wrote: On a freshly installed binary snapshot netstat -an -f inet6 shows netstat: invalid address (3) ??? thanks for the report, we can reproduce and are looking into this -Otto - # netstat -an -f inet6

Re: LC_COLLATE and PostgreSQL

2007-06-28 Thread Valentin Kozamernik
On Tue, 26 Jun 2007 at 12:35, Artur Litwinowicz wrote: O I think it is not good idea to change the code of OpenBSD by me. Years ago I was coding in C++ (at the University but with best mark ;). Now I am working for Oracle Corp. (PL/SQL and etc.) and I am a little out of practice ;) with

Re: looking for a good guide on driver writing

2007-06-28 Thread Claudio Jeker
On Thu, Jun 28, 2007 at 10:58:50AM +0200, Henning Brauer wrote: * Gregory Edigarov [EMAIL PROTECTED] [2007-06-27 11:31]: I am looking for a guide about driver writing for OpenBSD. here it is: look for a similiar driver, read understand it, start from there. ... and don't copy all the

Re: LC_COLLATE and PostgreSQL

2007-06-28 Thread Artur Litwinowicz
Hi Valentin, thank You very, very much for Your answer. Your idea is great !!! I am very happy with this solution :) Of course I have to recall that pleasure with C/C++ coding but for now this is the best and fastest way for me. Have a nice day, Best regards :) Artur On Thu, 28 Jun

Re: em Intel 1000 GT

2007-06-28 Thread JD Bronson
Someone posted on one of these lists asking about if this card works on 4.1... I dont recall seeing any reply.. I use this card just fine: em0 at pci1 dev 9 function 0 Intel PRO/1000GT (82541GI) rev 0x05: irq 5 -JD

Re: em Intel 1000 GT

2007-06-28 Thread Gordon Ross
On 28 June 2007 at 11:18, in message [EMAIL PROTECTED], JD Bronson [EMAIL PROTECTED] wrote: Someone posted on one of these lists asking about if this card works on 4.1... I dont recall seeing any reply.. OpenBSD 4.1-stable (GENERIC) #2: Tue May 8 16:48:20 BST 2007 em0 at pci7 dev 4 function

Re: i386 performance degradation since recent snapshots

2007-06-28 Thread Brian Candler
i'm encountering a real performance problem since a recent update : - previous snapshots dated around 22 may was working perfectly, launching my session (xfce) took around 10-15sec. Launching firefox took around 5secs - updated last week on 20 of june, launching my session takes around 1

openbsd 4.1 and keep state

2007-06-28 Thread jacek
Hi all, I have quick question , i need not to create state on one of the rule but once is done by default starting with verison 4.1 , not sure how to do it. Any tips welcome Thanku you Jacek

Re: openbsd 4.1 and keep state

2007-06-28 Thread Marius ROMAN
On 6/28/07, jacek [EMAIL PROTECTED] wrote: Hi all, I have quick question , i need not to create state on one of the rule but once is done by default starting with verison 4.1 , not sure how to do it. Any tips welcome Thanku you Jacek Read :

Intel Core 2 problems and OpenBSD Security

2007-06-28 Thread Siju George
-- Forwarded message -- From: Theo de Raadt [EMAIL PROTECTED] Date: Jun 27, 2007 10:38 PM Subject: Intel Core 2 To: [EMAIL PROTECTED] Various developers are busy implimenting workarounds for serious bugs in Intel's Core 2 cpu. These processors are buggy as hell, and some of

Re: openbsd 4.1 and keep state

2007-06-28 Thread Cabillot Julien
http://openbsd.org/faq/pf/filter.html#stateopts no state Prevents the rule from automatically creating a state entry. On 6/28/07, jacek [EMAIL PROTECTED] wrote: Hi all, I have quick question , i need not to create state on one of the rule but once is done by default starting with verison

Re: i386 performance degradation since recent snapshots

2007-06-28 Thread Lontronics Mailinglist account
On Thu, 28 Jun 2007 13:07:41 +0100 Brian Candler [EMAIL PROTECTED] wrote: i'm encountering a real performance problem since a recent update : - previous snapshots dated around 22 may was working perfectly, launching my session (xfce) took around 10-15sec. Launching firefox took around 5secs

Re: Intel Core 2 problems and OpenBSD Security

2007-06-28 Thread Siju George
On 6/28/07, Siju George [EMAIL PROTECTED] wrote: -- Forwarded message -- From: Theo de Raadt [EMAIL PROTECTED] Date: Jun 27, 2007 10:38 PM Subject: Intel Core 2 To: [EMAIL PROTECTED] Various developers are busy implimenting workarounds for serious bugs in Intel's Core 2 cpu.

Re: openbsd 4.1 and keep state

2007-06-28 Thread Huzeyfe ONAL
Use no state in your rule. jacek wrote: Hi all, I have quick question , i need not to create state on one of the rule but once is done by default starting with verison 4.1 , not sure how to do it. Any tips welcome Thanku you Jacek

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread J.D. Bronson
I have a question about this.. Will NEW offenders be added to /etc/tables/scanners as they are discovered and therefore not just remain in kernel? It would be nice since doing a reboot wipes out kernel kept IPs... table scanners persist file /etc/tables/scanners vs table scanners persist

Re: openbsd 4.1 and keep state

2007-06-28 Thread Stuart Henderson
On 2007/06/28 15:45, Huzeyfe ONAL wrote: Use no state in your rule. and 'flags any' if it's TCP.

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread J.D. Bronson
At 08:56 AM 06/28/2007, Stuart Henderson wrote: On 2007/06/28 08:46, J.D. Bronson wrote: Will NEW offenders be added to /etc/tables/scanners as they are discovered and therefore not just remain in kernel? No, pf does not write to files. How about cron(8) and pfctl(8) instead? so if it wont

Re: Intel Core 2

2007-06-28 Thread Gary Baluha
http://www.theregister.com/2007/06/27/intel_core2_duo_bios_fix/ Intel has released a BIOS patch for Windows machines running Core 2 and Xeon 3000/5000 chips that addresses potential unpredictable system behavior. After reading the whole article, it sounds like Intel is attempting to address some

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Stuart Henderson
On 2007/06/28 08:46, J.D. Bronson wrote: Will NEW offenders be added to /etc/tables/scanners as they are discovered and therefore not just remain in kernel? No, pf does not write to files. How about cron(8) and pfctl(8) instead?

FTP traffic counting

2007-06-28 Thread Juan Miscaro
I am using OpenBSD 4.0 and I am counting bytes with labels for most protocols but with ftp-proxy I do not know how to proceed. How can I do this? These are the rules I have in pf.conf: nat-anchor ftp-proxy/* rdr-anchor ftp-proxy/* rdr pass on $INT \ inet proto tcp \ from

Re: Intel Core 2

2007-06-28 Thread David W. Hess
On Thu, 28 Jun 2007 10:26:45 +0200, RedShift [EMAIL PROTECTED] wrote: Reliability decay of low-lead materials may be economically desirable for some consumer product companies because it provides a mechanism to enforce planned obsolescence and replacement. Ironically, this is the opposite of

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Joachim Schipper
On Wed, Jun 27, 2007 at 09:54:04PM -0700, Steve B wrote: The rule I've had in my pf.conf file to catch and block forceful SSH attempts no longer appears to be working. I see the entries in my authlog, but the IPs are no longer getting added to my table. I suspect I screwed something up, but

Re: Intel Core 2

2007-06-28 Thread Stuart Henderson
On 2007/06/28 09:16, David W. Hess wrote: On Thu, 28 Jun 2007 10:26:45 +0200, RedShift [EMAIL PROTECTED] wrote: Reliability decay of low-lead materials may be economically desirable for some consumer product companies because it provides a mechanism to enforce planned obsolescence and

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Bill
On Thu, 28 Jun 2007 09:02:43 -0500 J.D. Bronson [EMAIL PROTECTED] wrote: At 08:56 AM 06/28/2007, Stuart Henderson wrote: On 2007/06/28 08:46, J.D. Bronson wrote: Will NEW offenders be added to /etc/tables/scanners as they are discovered and therefore not just remain in kernel? No, pf

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Stuart Henderson
On 2007/06/28 09:02, J.D. Bronson wrote: At 08:56 AM 06/28/2007, Stuart Henderson wrote: On 2007/06/28 08:46, J.D. Bronson wrote: Will NEW offenders be added to /etc/tables/scanners as they are discovered and therefore not just remain in kernel? No, pf does not write to files. How about

Re: USB200M (linksys) reporting device problem, disabling port

2007-06-28 Thread Eric
On Wed, Jun 27, 2007 at 09:45:17PM -0400, Eric wrote: hello.. i just installed OpenBSD 4.1 from an original CD. My USB ethernet adapter, a Linksys USB200M is a known good working adapter (verified on Mac OS X 10.4 and FreeBSD 6.2). I am building a gateway with OpenBSD and this hardware has only

logger time stamps

2007-06-28 Thread Craig Skinner
I've written a korn script (viagrad) that runs as a daemon and checks that my ADSL router is up. If no hosts beyond the router are pingable, it resets (via expect scripts) the username in the router to the telco's default, then waits a while for a re-train on the gateway, reboots the router,

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Daniel Ouellet
J.D. Bronson wrote: At 08:56 AM 06/28/2007, Stuart Henderson wrote: On 2007/06/28 08:46, J.D. Bronson wrote: Will NEW offenders be added to /etc/tables/scanners as they are discovered and therefore not just remain in kernel? No, pf does not write to files. How about cron(8) and pfctl(8)

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread J.D. Bronson
Guys...I was not the one that started this thread.. I just chimed in and asked for a tweak on the setup. I have what I need for now :) -JD At 11:54 AM 06/28/2007, Daniel Ouellet wrote: J.D. Bronson wrote: At 08:56 AM 06/28/2007, Stuart Henderson wrote: On 2007/06/28 08:46, J.D. Bronson

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Daniel Ouellet
J.D. Bronson wrote: Guys...I was not the one that started this thread.. I just chimed in and asked for a tweak on the setup. Sorry for my mistake then. I should refrain from replying on lack of sleep. (; I have what I need for now :) Glad it help you never the less.

clamav on 3.9

2007-06-28 Thread Marcos Laufer
Hi there, I'm trying to install the newest clamav (0.90.3) on OpenBSD 3.9 . I updated the sources, and managed to compile it . But when i try to install the package i get this error: pkg_add /usr/ports/packages/i386/all/clamav-0.90.3p0.tgz Can't install

Fw: clamav on 3.9

2007-06-28 Thread Marcos Laufer
I'v managed to compile curl (jsut had to remove the old one first) but i still can't install the clamav package , i still get the same error message: test:/usr/ports/security/clamav{95}# pkg_add /usr/ports/packages/i386/all/clamav-0.90.3p0.tgz Can't install

Re: clamav on 3.9

2007-06-28 Thread Stuart Henderson
On 2007/06/28 15:56, Marcos Laufer wrote: I'm trying to install the newest clamav (0.90.3) on OpenBSD 3.9 . I updated the sources, and managed to compile it . But when i try to install the package i get this error: this is a variant of http://www.openbsd.org/faq/faq15.html#NoFun; Can't

Re: clamav on 3.9

2007-06-28 Thread Daniel Ouellet
I'm trying to install the newest clamav (0.90.3) on OpenBSD 3.9 . I updated The clamav package for 3.9 is clamav-0.88.tgz For 4.1 it is: clamav-0.90.tgz Don't mix versions. http://openbsd.org/faq/faq15.html#Latest

Fw: clamav on 3.9 [SOLVED]

2007-06-28 Thread Marcos Laufer
I just worked it out, sorry for the noise ! Just had to compile clamav again with the newest curl installed , and the resulting clamav package worked just fine. - Original Message - From: Marcos Laufer [EMAIL PROTECTED] To: misc@openbsd.org Sent: Thursday, June 28, 2007 4:11 PM

openbsd 4.0 installed, need to add network interface after install

2007-06-28 Thread John Mendenhall
openbsd gurus, As the saga continues... I have a newly built server with openbsd 4.0. During installation, it did not find the onboard lan interface, which I did not realize until after the installation had completed. I made sure the bios was set properly. There was no LAN option in the BIOS.

OpenBSD 4.0: isakmpd and immediate use of crls (without isakmpd restart)

2007-06-28 Thread catalin visinescu
Hello, I was wondering what is the best way to immediately use a newly received crl that contains a revoked certificate... Basically if I have 3 firewalls and one of them is compromised I will push a new crl on the 2 uncorrupted firewalls. The thing is that (even when I send them a

Re: openbsd 4.0 installed, need to add network interface after install

2007-06-28 Thread stuart van Zee
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Mendenhall Sent: Thursday, June 28, 2007 03:37 PM To: misc@openbsd.org Subject: openbsd 4.0 installed, need to add network interface after install openbsd gurus, As the saga continues... I

Re: Intel Core 2

2007-06-28 Thread Rui Miguel Silva Seabra
Thanks very much! On Thu, Jun 28, 2007 at 10:24:01AM +0200, Johan P. Lindstrvm wrote: rough translation from swedish to english of: ...

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Martin Schröder
2007/6/28, J.D. Bronson [EMAIL PROTECTED]: so if it wont write to a file...I presume it blocks whats listed in /etc/tables/scanners permanently and then only blocks NEW offenders via kernel memory? (can someone clarify my understanding of that? Do you really need a file? In my experience

Re: logger time stamps

2007-06-28 Thread Craig Skinner
Solved with 'eval', details below: On Thu, Jun 28, 2007 at 04:50:54PM +0100, Craig Skinner wrote: In the script I have: this=$(basename ${0}) syslog=logger -t ${this} syslog='logger -t ${this}' .. ping_hosts() { .. .. # if our router is not connected to the

bgpd and multihop

2007-06-28 Thread Jon Morby
I've just updated one of our routers from an end of May snapshot to a Jun 28th snapshot and have noticed that we seem to be having problems with our multihop sessions since the upgrade. [EMAIL PROTECTED] bgpctl -n s rib 80.252.127.0/24 flags: * = Valid, = Selected, I = via IBGP, A =

Re: openbsd 4.1 and keep state

2007-06-28 Thread Ryan McBride
On Thu, Jun 28, 2007 at 02:56:33PM +0100, Stuart Henderson wrote: On 2007/06/28 15:45, Huzeyfe ONAL wrote: Use no state in your rule. and 'flags any' if it's TCP. You can set this explicitly if you'd like, but it's not necessary: pfctl only applies 'flags S/SA' by default if the rule is

spamd patch

2007-06-28 Thread John Wong
I think the passtime should use now + passtime not now + expire, Is it correct? Index: libexec/spamd/grey.c === RCS file: /cvs/src/libexec/spamd/grey.c,v retrieving