Mobile IP routing

2007-08-09 Thread Justin Krejci
Hello List, Is there any sort of transparent Mobile IP implementation in OpenBSD? I see the use of GRE is supported. I am looking for something along the lines of TMIP (www.slyware.com/projects_tmip.shtml) where the layer 2 and or layer 3 devices can communicate with each other on the separate

Re: OpenBSD/hppa

2007-08-09 Thread J.C. Roberts
On Wednesday 08 August 2007, Jacob Yocom-Piatt wrote: jc, now that i have a bit of hobby funds, i am accumulating other architectures that run openbsd and am interested in having an hppa machine. got any advice on a good one to acquire? leads on where to acquire them and for how much would

[OT] cisco switch, router and firewall suggestions

2007-08-09 Thread Chris
I'm trying to buy (from ebay) a cisco switch, router and pix firewall for learning purposes. All these will be connected to a Linksys ADSL modem which also has wireless capability. The OSs will be OpenBSD4.1, Windows XP and Linux distros. I will probably also try IPv6 (not sure if that has got

Re: Possible mug in mini_sendmail-chroot.

2007-08-09 Thread Stuart Henderson
On 2007/08/09 04:02, Firas Kraiem wrote: I'm using the sendmail binary found in the mini_sendmail-chroot package to be able to use the mail() function in PHP pages. s/mini_sendmail/femail/ should fix this. It's pretty much drop-in, but by default looks up localhost by name which mini_sendmail

Rif: Looking for some help with an IPSEC config for road warriors

2007-08-09 Thread patrik . bergamasco
in this video forget the isakmpd configuration!... but i can config simple isakmpd with this: lan---obsd--inet--roadwarrior |__vpn_| lan ip class : 192.168.1.0/24 obsd: int_if : 192.168.1.xyz ext_if : 0.0.0.0/32 (internet) roadwarrior: ext_if : 0.0.0.0/32

Re: OpenBSD/hppa

2007-08-09 Thread J.C. Roberts
On Wednesday 08 August 2007, Mark Kettenis wrote: Rest assured, that C3000 and J5000 are put to good use by people even if they run hppa instead of hppa64. But I'm planning to get hppa64 running too on these boxes eventually. :-) Anyway, if you, or someone else on the list, has hppa

Re: howto set global environment variable (e.g. PATH, JAVA_HOME)

2007-08-09 Thread J.C. Roberts
On Wednesday 08 August 2007, Will Maier wrote: 4. change /etc/ksh.kshrc and create .kshrc sourcing /etc/ksh.kshrc for all users (and in /etc/skel...) And this. ummm. I don't think so. The .profile is read only *once* on initial login. Everything that is spawned from your initial login

Re: howto set global environment variable (e.g. PATH, JAVA_HOME)

2007-08-09 Thread Clint Pachl
Lars Hansson wrote: On 8/9/07, Clint Pachl [EMAIL PROTECTED] wrote: Or you could programatically change each user's .profile. Uhm, why? Markus is correct that both /etc/profile and $HOME/.profile are sourced when you log in so to set up global variables you set them in /etc/profile.

Re: SSH brute force attacks no longer being caught by PF rule

2007-08-09 Thread Joachim Schipper
On Wed, Aug 08, 2007 at 10:26:11AM -0700, David Newman wrote: On 6/27/07 10:39 PM, Daniel Ouellet wrote: Put quickly as an example, but [to block SSH scans] you can try: # Define some variable for clarity SSH_LIMIT=(max-src-conn-rate 3/30, overload scanners flush global) ## SSH

Re: Lenovo 8744-J2U - several questions

2007-08-09 Thread Eric Elena
Le mercredi 08 aoC;t 2007 C 10:55 -0400, Frank Bax a C)crit : At 04:49 AM 8/7/07, Eric Elena wrote: Le lundi 06 aoC;t 2007 C 21:21 -0400, Stephan Andre' a C)crit : On Monday 06 August 2007 18:29:12 Matthieu Herrb wrote: On 8/6/07, Frank Bax [EMAIL PROTECTED] wrote: Just got a new

Re: Segmentation fault in sh script using base utilities only

2007-08-09 Thread Andrés
On 8/6/07, Otto Moerbeek [EMAIL PROTECTED] wrote: On Mon, 6 Aug 2007, Andris wrote: On 8/6/07, Otto Moerbeek [EMAIL PROTECTED] wrote: On Sun, 5 Aug 2007, Andris wrote: Yeap, it segfaults here with: aTbTc daaaTe fs Upper

pppoe problems

2007-08-09 Thread Umaxx
hi, after upgrading my router to -current the dsl pppoe connection does not work anymore. userland ppp connects fine but freezes after K30 seconds. freeze means the connection is still there no errors shown in logs and ifconfig state is normal but there is no more incoming traffic. the provider

Re: pppoe problems

2007-08-09 Thread Umaxx
resend, since stupid webmailer killed linebreaks: hi, after upgrading my router to -current the dsl pppoe connection does not work anymore. userland ppp connects fine but freezes after K30 seconds. freeze means the connection is still there no errors shown in logs and ifconfig state is normal

Re: pppoe problems

2007-08-09 Thread Gregory Edigarov
Just want to make a confirmation with two other providers. Also I observe this behavior with both pppoe(4) and pppoe(8). Umaxx wrote: resend, since stupid webmailer killed linebreaks: hi, after upgrading my router to -current the dsl pppoe connection does not work anymore. userland ppp

Pendrive detecting and mount script

2007-08-09 Thread smonek
Hello this is my script to auto mount pendrives / usbdrivs Script work ony with MSDOS fs Script detecting all partitions betewn a: and l: on sd0 ,sd1 ,sd2 ,sd3 First time you must run this script as a root or manula created /umass catalog and chmod 766 /umass

famd, gnome and xfce4

2007-08-09 Thread Markus Bergkvist
Hi I can't get the file browser in gnome to update automatically when a file is e.g. created or removed if I start famd with sgi_fam/1-2 stream rpc/tcp waitroot/usr/local/sbin/famd famd in /etc/inetd.conf But if I start famd with if [ -x /usr/local/sbin/famd ]; then

Re: SSH brute force attacks no longer being caught by PF rule

2007-08-09 Thread Cristiano Deana
2007/7/2, Steve B [EMAIL PROTECTED]: I'm the one who started this thread. If I can block them for an hour without a table that would be even better.. I was using the file to store the IP's as they were identified by the rule and had been planning to use the expiretable package to start

Re: need pointers to multicasting VPN stuff

2007-08-09 Thread besnard michel
hello, i thinks you may use GRE tunneling instead VPN (IPSec) http://www.openbsd.org/cgi-bin/man.cgi?query=gresektion=4 normaly multicast traffic can not be transport trought IPSec tunneling or see bridging over IPSec tunnel... !!? regards, Mike 2007/8/9, Jon Wells [EMAIL PROTECTED]: G'day,

Re: famd, gnome and xfce4

2007-08-09 Thread Landry Breuil
On 8/9/07, Markus Bergkvist [EMAIL PROTECTED] wrote: Hi I can't get the file browser in gnome to update automatically when a file is e.g. created or removed if I start famd with sgi_fam/1-2 stream rpc/tcp waitroot/usr/local/sbin/famd famd in /etc/inetd.conf But if I start

Re: systrace/sysjail wrappers security

2007-08-09 Thread Niels Provos
There is a straight forward solution for this problem. The initial prototype of Systrace had a look-aside buffer in the kernel for copyin. I told Robert about this, not sure if he mentioned that in his paper or not. There obviously would be some associated performance impacts. Niels. On

Looking for used nortel phones.

2007-08-09 Thread Tia Carroll
Good Morning We are looking for used Nortel or meridian phones. If you have any in a box somewhere in the office please call us. We need them for our company. We have expanded a few divisions and would like to avoid purchasing and brand new ones. We will happily arrange shipping. Please call

Re: [OT] cisco switch, router and firewall suggestions

2007-08-09 Thread Reyk Floeter
why do you expect recommendations for gear from cizzco-eeh on an openbsd list? tsk tsk tsk On Thu, Aug 09, 2007 at 06:07:08PM +1000, Chris wrote: I'm trying to buy (from ebay) a cisco switch, router and pix firewall for learning purposes. All these will be connected to a Linksys ADSL modem

Re: searching packages? pkg_grep?

2007-08-09 Thread Antti Harri
On Thu, 9 Aug 2007, John N. Brahy wrote: If I don't have ports installed, is there a way to do a search of all the available package names to find one I'm looking for? Something like a pkg_grep... Hi, is pkg_mklocatedb(1) what you're looking for? -- Antti Harri

Re: Possible mug in mini_sendmail-chroot.

2007-08-09 Thread Firas Kraiem
Stuart Henderson wrote: On 2007/08/09 04:02, Firas Kraiem wrote: I'm using the sendmail binary found in the mini_sendmail-chroot package to be able to use the mail() function in PHP pages. s/mini_sendmail/femail/ should fix this. It's pretty much drop-in, but by default looks up

Re: [OT] cisco switch, router and firewall suggestions

2007-08-09 Thread David Newman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Aug 09, 2007 at 06:07:08PM +1000, Chris wrote: I'm trying to buy (from ebay) a cisco switch, router and pix firewall for learning purposes. All these will be connected to a Linksys ADSL modem which also has wireless capability. The OSs

sendmail SMTP auth

2007-08-09 Thread Paolo Supino
Hi I want to add SMTP auth to sendmail. Will it be easier for me to try and add the support to the source shipped by OpenBSD or to the source that I will download from sendmail.org? Other suggestions on setting up a mail server with SMTP auth are welcome. TIA Paolo

Re: [OT] cisco switch, router and firewall suggestions

2007-08-09 Thread Nick Davey
You should be deploying OBSD as routers, but since it's for learning :P. Buy the Cisco 2900XL, as the 1900 runs CatOS and is only 10meg. You can use the 2900XL as a production switch for your network (I do) and the fact that it runs IOS will be good for learning. For routers just use Dynagen,

Re: searching packages? pkg_grep?

2007-08-09 Thread Bernd Ahlers
John N. Brahy [Thu, Aug 09, 2007 at 09:49:27AM -0700] wrote: If I don't have ports installed, is there a way to do a search of all the available package names to find one I'm looking for? Something like a pkg_grep... Read the pkg_info(1) manpage and look for the -Q option. Bernd

Re: searching packages? pkg_grep?

2007-08-09 Thread James Turner
On Thu, Aug 09, 2007 at 09:49:27AM -0700, John N. Brahy wrote: If I don't have ports installed, is there a way to do a search of all the available package names to find one I'm looking for? Something like a pkg_grep... I use alias pkg_search=echo ls | ftp -a \$PKG_PATH | sed 's/.*\ //g'

Re: daily weekly scripts OpenBSD style for Mac OS X

2007-08-09 Thread Julien TOUCHE
Kelly Martin wrote on 8/08/07 23:58: Wondering if anyone has taken the excellent daily and weekly script concept used in OpenBSD and tried doing similar on other BSD-based OSes, like Mac OS X? other BSD have it including osx: $ ll /var/log/ |egrep '(daily|weekly|monthly)' -rw-r--r-- 1 root

Re: SSH brute force attacks no longer being caught by PF rule

2007-08-09 Thread David Newman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 8/9/07 3:22 AM, Joachim Schipper wrote: # Allow quick valid traffic to ssh but log all attempts as well pass in log quick on $unpro inet proto tcp from ! scanners \ to $unpro port ssh $SSH_LIMIT Skip '! scanners' unless it's intended as

Re: hoststated httpssl w/ chained (comodo) certificate

2007-08-09 Thread ben
On 08/08/07, ben [EMAIL PROTECTED] wrote: I'm wondering if there's a way to specify an intermediary and root cert with hoststated. There wasn't, but it was very easy to fix. --- relay.c.orig Thu Aug 9 10:35:07 2007 +++ relay.c Thu Aug 9 10:14:23 2007 @@ -1910,7 +1910,7 @@

Re: SSH brute force attacks no longer being caught by PF rule

2007-08-09 Thread David Newman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 8/9/07 10:24 AM, David Newman wrote: On 8/9/07 3:22 AM, Joachim Schipper wrote: # Allow quick valid traffic to ssh but log all attempts as well pass in log quick on $unpro inet proto tcp from ! scanners \ to $unpro port ssh $SSH_LIMIT

cvs up, no space left in /tmp

2007-08-09 Thread Mackan
Hi, For many months, I've had this in root's crontab: # update src tree 0 4 * * * cd /usr/src cvs -q up - rOPENBSD_4_1 -Pd with no problem. For about a week now I get mail from cron about no space left on device. I need some advise on how to find whats

Re: pppoe problems

2007-08-09 Thread Can Erkin Acar
Umaxx wrote: hi, after upgrading my router to -current the dsl pppoe connection does not work anymore. userland ppp connects fine but freezes after K30 seconds. freeze means the connection is still there no errors shown in logs and ifconfig state is normal but there is no more incoming

Re: sendmail SMTP auth

2007-08-09 Thread Gilles Chehade
On Thu, Aug 09, 2007 at 12:32:10PM -0400, Paolo Supino wrote: Hi I want to add SMTP auth to sendmail. Will it be easier for me to try and add the support to the source shipped by OpenBSD or to the source that I will download from sendmail.org? Other suggestions on setting up a mail server

Re: searching packages? pkg_grep?

2007-08-09 Thread John N. Brahy
I use alias pkg_search=echo ls | ftp -a \$PKG_PATH | sed 's/.*\ //g' | grep -i. That's exactly what I was looking for. Thank you!

Re: sendmail SMTP auth

2007-08-09 Thread Bryan Vyhmeister
On Aug 9, 2007, at 9:32 AM, Paolo Supino wrote: I want to add SMTP auth to sendmail. Will it be easier for me to try and add the support to the source shipped by OpenBSD or to the source that I will download from sendmail.org? Other suggestions on setting up a mail server with SMTP auth are

Re: Possible mug in mini_sendmail-chroot.

2007-08-09 Thread Matt
Firas Kraiem schreef: Stuart Henderson wrote: On 2007/08/09 04:02, Firas Kraiem wrote: I'm using the sendmail binary found in the mini_sendmail-chroot package to be able to use the mail() function in PHP pages. s/mini_sendmail/femail/ should fix this. It's pretty much drop-in,

MS Exchange to MBOX

2007-08-09 Thread Joshua Gimer
We are planning on moving a large amount of Exchange mailboxes to UNIX mbox format. My question is, does anyone know of any projects out there or of any tools that can assist in this conversion? Thanks Josh

Re: sendmail SMTP auth

2007-08-09 Thread Mike Erdely
On Thu, Aug 09, 2007 at 12:32:10PM -0400, Paolo Supino wrote: I want to add SMTP auth to sendmail. Will it be easier for me to try and add the support to the source shipped by OpenBSD or to the source that I will download from sendmail.org? Other suggestions on setting up a mail server with

Re: MS Exchange to MBOX

2007-08-09 Thread David Newman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 8/9/07 11:58 AM, Joshua Gimer wrote: We are planning on moving a large amount of Exchange mailboxes to UNIX mbox format. My question is, does anyone know of any projects out there or of any tools that can assist in this conversion? Get

Re: MS Exchange to MBOX

2007-08-09 Thread jul
Joshua Gimer wrote on 9/08/07 20:58: We are planning on moving a large amount of Exchange mailboxes to UNIX mbox format. My question is, does anyone know of any projects out there or of any tools that can assist in this conversion? please, cross posting is very bad. Avoid it. read

Re: cvs up, no space left in /tmp

2007-08-09 Thread Jim Razmus
* Mackan [EMAIL PROTECTED] [070809 14:13]: Hi, For many months, I've had this in root's crontab: # update src tree 0 4 * * * cd /usr/src cvs -q up - rOPENBSD_4_1 -Pd with no problem. For about a week now I get mail from cron about no space left on

Re: SSH brute force attacks no longer being caught by PF rule

2007-08-09 Thread Joachim Schipper
On Thu, Aug 09, 2007 at 10:29:19AM -0700, David Newman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 8/9/07 10:24 AM, David Newman wrote: On 8/9/07 3:22 AM, Joachim Schipper wrote: # Allow quick valid traffic to ssh but log all attempts as well pass in log quick on $unpro

Re: [CentOS] MS Exchange to MBOX

2007-08-09 Thread Ross S. W. Walker
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua Gimer Sent: Thursday, August 09, 2007 2:58 PM To: CentOS mailing list; General Red Hat Linux discussion list; misc@openbsd.org; [EMAIL PROTECTED] Subject: [CentOS] MS Exchange to MBOX We

Re: [SAGE] MS Exchange to MBOX

2007-08-09 Thread Jeremiah Johnson
You could enable IMAP then use a script to do IMAP to Mbox / maildir. -Jeremiah Johnson Sent from my iPhone On Aug 9, 2007, at 1:58 PM, Joshua Gimer [EMAIL PROTECTED] wrote: We are planning on moving a large amount of Exchange mailboxes to UNIX mbox format. My question is, does anyone know

Re: [SAGE] MS Exchange to MBOX

2007-08-09 Thread Jon Buys
Josh, Good luck... I don't envy you on this one, but congrats for moving away from Exchange. Nothing about getting mail out of exchange outside of outlook is easy. As far as I know MS does not publish the structure of their database, so getting everything out of it in a readable fashion is

Re: sendmail SMTP auth

2007-08-09 Thread andrew fresh
On Thu, Aug 09, 2007 at 03:34:09PM -0400, Mike Erdely wrote: 1. Put 'WANT_SMTPAUTH=1' in your /etc/mk.conf file. 2. Extract src.tar.gz to /usr/src. 2a. pkg_add cyrus-sasl 3. Rebuild sendmail. l8rZ, -- andrew - ICQ# 253198 - Jabber: [EMAIL PROTECTED] BOFH excuse of the day: sticktion

Re: cvs up, no space left in /tmp

2007-08-09 Thread Mackan
On Aug 9, 2007, at 9:46 PM, Jim Razmus wrote: * Mackan [EMAIL PROTECTED] [070809 14:13]: Hi, # cd /usr/src cvs -q up -rOPENBSD_4_1 -Pd can't create temporary directory /tmp/cvs-serv19063 No space left on device I think that is an issue on the server. Here's an alternative that eases the

Re: [CentOS] MS Exchange to MBOX

2007-08-09 Thread Les Mikesell
Joshua Gimer wrote: We are planning on moving a large amount of Exchange mailboxes to UNIX mbox format. My question is, does anyone know of any projects out there or of any tools that can assist in this conversion? There is always brute force if you can't find anything better. Just connect

Re: Possible mug in mini_sendmail-chroot.

2007-08-09 Thread Joachim Schipper
On Thu, Aug 09, 2007 at 04:02:41AM +0200, Firas Kraiem wrote: Greetings, I'm using the sendmail binary found in the mini_sendmail-chroot package to be able to use the mail() function in PHP pages. However, it simply refuses to send mail when I specify the recipient address in the form Name

Re: [OT] cisco switch, router and firewall suggestions

2007-08-09 Thread Joachim Schipper
On Thu, Aug 09, 2007 at 06:07:08PM +1000, Chris wrote: I'm trying to buy (from ebay) a cisco switch, router and pix firewall for learning purposes. All these will be connected to a Linksys ADSL modem which also has wireless capability. The OSs will be OpenBSD4.1, Windows XP and Linux distros.

Re: sendmail SMTP auth

2007-08-09 Thread Joachim Schipper
On Thu, Aug 09, 2007 at 12:32:10PM -0400, Paolo Supino wrote: Hi I want to add SMTP auth to sendmail. Will it be easier for me to try and add the support to the source shipped by OpenBSD or to the source that I will download from sendmail.org? I'd definitely use OpenBSD's version, that's

various lamo questions from a shiny new person

2007-08-09 Thread poncenby
List What options are there when you have multiple IP addresses and 1 openbsd 4.1 box with two NICs acting as a firewall? The Internet goes into NIC1 and a switch (with boxes plugged in) goes into NIC2 (10/8 address range). Is the alias command used in hostname.if files the only way of

Re: chflag operation not permited

2007-08-09 Thread Aaron P. Martinez
Ted Unangst wrote: On 3/15/06, Jinxi Cheng [EMAIL PROTECTED] wrote: Hi, I'm getting operation not permited when I do this: # chflags -R schg /bin chflags: /bin/chmod: Operation not permitted chflags: /bin/md5: Operation not permitted chflags: /bin/mt: Operation not permitted chflags:

Re: various lamo questions from a shiny new person

2007-08-09 Thread Nick Guenther
On 8/9/07, poncenby [EMAIL PROTECTED] wrote: List What options are there when you have multiple IP addresses and 1 openbsd 4.1 box with two NICs acting as a firewall? The Internet goes into NIC1 and a switch (with boxes plugged in) goes into NIC2 (10/8 address range). Is the alias command

Re: searching packages? pkg_grep?

2007-08-09 Thread Adriaan
On 8/9/07, John N. Brahy [EMAIL PROTECTED] wrote: If I don't have ports installed, is there a way to do a search of all the available package names to find one I'm looking for? Something like a pkg_grep... I use this ..netrc (see man ftp) file to retrieve a listing of snapshot packages